last executing test programs: 1m55.042898818s ago: executing program 4 (id=111): socket(0x10, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) syz_emit_ethernet(0x4e, &(0x7f0000000140)={@local, @multicast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "170100", 0x18, 0x2b, 0x0, @remote, @local, {[], {0x0, 0x0, 0x18, 0x0, @wg=@data}}}}}}, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) mmap(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x1000001, 0x8013, r0, 0xf6690000) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22, 0x3, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x11}}, 0x6}, 0x1c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e22, 0xa, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c) writev(r1, &(0x7f0000000080)=[{&(0x7f0000000100)="5514377d925cfac68fa5e905ccd2593d6d0f37d8422f54e9fbc8881033b7e59b0ce2a896d5c195741b964850ca7444d0926630715341d8ef0611e595745d05bb0484b65adfe33ed3639e7722ef74b92df54d886779faf3deee20a0724362221a9fc4a7f86a07042dd5875131ff0d57107a01db1964be5dd15d8d3be6fd3209f87210f2e9de528884797a1c43157c6f56349e263c79cb13df66409f7cd33b9ebb000fd19d5521eab9eb89ad56a45108b1d3179077413d0e16044c0fe0", 0xbc}, {&(0x7f00000003c0)="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", 0xf44}], 0x2) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000040)={&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000380)=0x40) 1m54.720482035s ago: executing program 4 (id=115): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys_sec\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys_sec\x00', &(0x7f0000000080)='securityfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys_sec/tomoyo/domain_policy\x00', 0x2, 0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x12160) read(r0, &(0x7f0000000100)=""/9, 0xfffffd87) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000d40)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./mnt\x00', 0x1ff) mount(&(0x7f0000000080)=@filename='mtd0\x00', &(0x7f00000000c0)='./mnt\x00', &(0x7f0000000000)='jffs2\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./mnt/fillfile\x00', 0x101042, 0x9d) write(r1, &(0x7f00000005c0)="1f0102030405060708090a0b0c0d0e0f101112131415161718191a1b1c1d1e1f202122232425262728292a2b2c2d2e2f303132333435363738393a3b3c3d3e3f", 0x8014) 1m54.173439259s ago: executing program 4 (id=120): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) syz_open_dev$vim2m(&(0x7f00000003c0), 0x14, 0x2) sched_setattr(0x0, 0x0, 0x0) r0 = syz_ublk_setup_io_uring(0xd, &(0x7f0000000500)={0x0, 0x30b5, 0x0, 0x2, 0x377}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000300)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x6, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff}}}, &(0x7f0000000480)=0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) syz_ublk_setup_queues(r6, r4, &(0x7f0000000180)={0x0, 0x20fb87, 0x800, 0xfffffffd, 0x32c}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x200, 0x1006, 0x15a, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ac7, 0x8000, 0x10000000, 0x546}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x88de, 0x8, 0x3, 0xfffffffc}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x2000, 0x2, 0xbd}}], 0x1, &(0x7f0000000340)={0x2e, 0x54, 0x0, r6, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, 0x0, '\x00', {0x3, 0x826, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, 0x0, 0x0, 0x0, 0xffffffffffffff4f, 0x0, 0x0, 0x7}, 0x94) 1m52.591454659s ago: executing program 4 (id=128): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000380)={'vcan0\x00', 0x0}) r2 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r2, &(0x7f0000000080)={0x1d, r1, 0x0, {0x0, 0x0, 0x4}, 0xfd}, 0x18) sendmsg$can_j1939(r2, &(0x7f00000001c0)={&(0x7f0000000040)={0x1d, 0x0, 0x0, {0x0, 0x0, 0x4}}, 0x34, &(0x7f0000000180)={&(0x7f00000000c0)="92", 0x1a000}}, 0xee) r3 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000140)={'vcan0\x00', 0x0}) bind$can_j1939(r3, &(0x7f0000000100)={0x1d, r4, 0x0, {0x0, 0x1, 0x4}, 0x2}, 0x18) setsockopt$sock_int(r3, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$inet(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)="25790952e1d7e0a587", 0x9}], 0x1}, 0x4004) 1m51.135970785s ago: executing program 4 (id=137): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c9944, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file7\x00', 0x144) syz_mount_image$fuse(0x0, &(0x7f00000001c0)='./file7/file0\x00', 0x100000, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file7/file0\x00', 0xc8000, 0x120) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x888880, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r1, 0xc018937c, &(0x7f0000000200)={{0x1, 0x1, 0x18, r0, {0x1}}, './file0\x00'}) 1m50.175667749s ago: executing program 4 (id=145): r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x4, 0x0, 0xfffffffb}, 0x10) r1 = socket(0x1e, 0x4, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NODE_ADDR(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r3, 0x201, 0x400000, 0x25dfdbff, {{}, {}, {0x8, 0x11, 0x2000004}}}, 0x24}}, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r0, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f0000001ac0)=[{&(0x7f0000000ac0)}], 0x1}}], 0x1, 0x48000) syz_open_procfs(0x0, &(0x7f0000000080)='auxv\x00') r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r4, 0xffffffffffffffff, 0x0) 1m35.129677017s ago: executing program 32 (id=145): r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x4, 0x0, 0xfffffffb}, 0x10) r1 = socket(0x1e, 0x4, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NODE_ADDR(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r3, 0x201, 0x400000, 0x25dfdbff, {{}, {}, {0x8, 0x11, 0x2000004}}}, 0x24}}, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r0, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f0000001ac0)=[{&(0x7f0000000ac0)}], 0x1}}], 0x1, 0x48000) syz_open_procfs(0x0, &(0x7f0000000080)='auxv\x00') r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r4, 0xffffffffffffffff, 0x0) 25.835019153s ago: executing program 2 (id=498): r0 = syz_open_procfs(0x0, 0x0) r1 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x20) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='bond_slave_1\x00', 0x10) syz_emit_ethernet(0x8e, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaa1acd1f78800d86dd608a37f200587300fe8000000000000000000000000000bbfe8000000000000000000000000000aa00000000", @ANYRES8], 0x0) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da070000000000010902240001000000000904000009030000000921000000012222000905810308"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x22, {[@global=@item_012={0x2, 0x1, 0x9, "2313"}, @global=@item_012={0x2, 0x1, 0x0, "e53f"}, @global=@item_4={0x3, 0x1, 0x5, "b9575d82"}, @local=@item_012={0x2, 0x2, 0x2, "90dc"}, @global=@item_4={0x3, 0x1, 0x5, "0900be00"}, @main=@item_4={0x3, 0x0, 0x8}, @local=@item_4={0x3, 0x2, 0x0, "09007a15"}, @local=@item_4={0x3, 0x2, 0x0, "5d8c3dda"}]}}, 0x0}, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x0) syz_emit_vhci(0x0, 0x4) ioctl$USERFAULTFD_IOC_NEW(r0, 0xaa00) ioctl$UFFDIO_COPY(r0, 0xc028aa03, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000440)={0x0, @in={{0x2, 0x4e20, @broadcast}}, 0x5a, 0x46}, &(0x7f0000000500)=0x90) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = syz_usb_connect(0x2, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000404c05c1060001000000010902200001010080320904000002ff000000070581024000000705020240"], &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0}) syz_usb_ep_write(r4, 0x81, 0x0, 0x0) r5 = socket$rds(0x15, 0x5, 0x0) bind$rds(r5, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r5, &(0x7f0000000580)={&(0x7f00000005c0)={0x2, 0x4, @rand_addr=0x64010101}, 0x10, 0x0, 0x0, &(0x7f00000004c0)=[@rdma_args={0x48, 0x114, 0x1, {{0xd, 0x7}, {0x0}, 0x0, 0x0, 0x21}}], 0x48, 0x29ff1109601b30a4}, 0x0) syz_usb_control_io$lan78xx(r4, &(0x7f0000000140)={0x14, &(0x7f0000000880)=ANY=[@ANYBLOB="20071f0000001f228a6dce6cae94f978a7a6bc7446e2b2e6eddf7c51ffa809173b91ac510461333fee3a3940b6b5aa167defb88d0ac05e55fdee9597f1221c6696caf9acf80d87a2eaff68d643dc08518743505a3dd0a37d2ee437b5499948970b80d1f719ca06174352c272867b61ac76e928e80c46819fc9886a4580518625724fd2f642f08b51b8c48de56588a98f9678836f9f7cf44532e535d7406fb40cbf63fe884608258a2cc6ce9123d21f0eb9d09bd09c310df9d067b4d2cf540fba8088a9daa818ad5184a051ad0b967a"], &(0x7f00000000c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x41b}}}, &(0x7f0000000740)={0x34, &(0x7f0000000540)={0x5d89c9aff5cabef5, 0x17, 0x84, "32786e0186aa324055258f95167a4286cb08509bbb0082ae5d9713883be217fb247c0772a0b59fa37c4ed9463197f1c2253de35e53db1bbf74d0add94a188760da76f188d8fe3bac3afbe98ae01e5af780a66cdba468f005eb9fdb1b0d3f1d3b04b154de28d571e7e30a5afb7abcd4b9b70c4c4b62f7b1b48bcefffaa1d4d709a681c5bb"}, &(0x7f0000000600)={0x0, 0xa, 0x1, 0x6}, &(0x7f0000000640)={0x0, 0x8, 0x1, 0x1}, &(0x7f0000000680)={0xc0, 0xa1, 0x4, 0x7}, &(0x7f00000006c0)={0x40, 0xa0, 0x4, 0x8000}, &(0x7f0000000700)={0xc0, 0xa2, 0x2f, "356cd6f456ea27d88313f1b86161acaa2c2b4a31034b0781773bd1e883e851d1edd353ce5193f6d1dbe1d538180ff0"}}) socket$igmp(0x2, 0x3, 0x2) getdents64(r0, &(0x7f0000002440)=""/181, 0xb5) openat$nullb(0xffffffffffffff9c, 0x0, 0xe2000, 0x0) 20.489358677s ago: executing program 2 (id=497): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000740)={'wlan1\x00', 0x0}) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000c80)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000003a00000008000300", @ANYRES32=r3, @ANYBLOB="05005b"], 0x24}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r8, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)={0x28, r6, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x40}]}, 0x28}}, 0x0) sendmmsg(r0, &(0x7f00000000c0), 0x4000000000000d2, 0x8048848) 20.253930963s ago: executing program 2 (id=501): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={0x0}}, 0x44010) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20005891}, 0x20000000) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@func_proto={0x0, 0x3, 0x0, 0xd, 0x2, [{0x10, 0x3}, {0xb, 0x2}, {0xa, 0x1}]}]}}, 0x0, 0x3e, 0x0, 0xa, 0x32e}, 0x28) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast2, @local}, 0xc) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x100000000, 0x0, 0x7f, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x3, 0x5, 0x8, 0x2, 0xffffffffffffffff], 0x0, 0x200}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x101, 0xaec4, 0x6, 0x4004, 0x2, 0x4, 0xffffffffffffffff, 0x0, 0x0, 0x7, 0x20000, 0x1c, 0x0, 0x5, 0x1, 0xffffffffffffffff], 0x0, 0x41981}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 19.924076291s ago: executing program 2 (id=502): bpf$BPF_PROG_DETACH(0x8, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeee, 0x8031, 0xffffffffffffffff, 0xffffc000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) 18.928024996s ago: executing program 2 (id=505): mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./mysys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./mysys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./mysys/bus/pci/devices/0000:00:05.0/resource0\x00', 0x2, 0x0) r2 = socket$inet(0xa, 0x801, 0x84) connect$inet(r2, 0x0, 0x0) listen(r2, 0x8) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x3, 0x11, r1, 0x4000) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) syz_clone3(&(0x7f0000003240)={0x8004000, 0x0, 0x0, 0xfffffffffffffffd, {0x2c}, 0x0, 0x0, 0x0, 0x0}, 0x58) 18.651627853s ago: executing program 2 (id=507): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r1) getsockname$packet(r1, &(0x7f00000005c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000580)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000200000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x4) sendmsg$IPVS_CMD_SET_INFO(r5, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r5, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x66) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001440)=@newlink={0x50, 0x10, 0xffffff1f, 0x0, 0x80, {0x0, 0x0, 0x0, 0x0, 0x300, 0x17e05}, [@IFLA_MASTER={0x8, 0xa, r6}, @IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x4000, 0x640}}}}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="a4280400000000001400350076657468305f746f5f626f6e6400000008000a00", @ANYRES32=r2], 0x3c}, 0x1, 0x0, 0x0, 0x4008800}, 0x8000) sendmsg$nl_route(r0, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f00000000c0)=@setlink={0x2c, 0x13, 0x5, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r2, 0x312, 0x800}, [@IFLA_ADDRESS={0xa, 0x1, @remote}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x42) 11.643893549s ago: executing program 1 (id=520): r0 = io_uring_setup(0x4a86, &(0x7f0000000300)={0x0, 0x4178, 0x40, 0x8001002, 0x112}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r3, 0x4008ae90, &(0x7f0000000440)={0x2, 0x0, [{0x1, 0x0, 0x0, 0x0, 0x0, 0x20}, {0x40000001, 0x0, 0x0, 0x31237648, 0x0, 0x9}]}) ioctl$KVM_CAP_HYPERV_ENLIGHTENED_VMCS(r3, 0x4068aea3, &(0x7f0000000300)={0xa3, 0x0, 0x0}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x2d, &(0x7f0000000000)=[@cr4={0x1, 0x9a0}], 0x1) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000380)={0x1, 0x0, [{0x40000073, 0x0, 0x1001}]}) ioctl$KVM_SET_NESTED_STATE(r3, 0x4080aebf, &(0x7f0000000700)=@vmx={0x4, 0x0, 0x2080, {0x1000, 0xffffffffffffffff}}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000001000)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bc00000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$KVM_RUN(r3, 0xae80, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) close_range(r0, 0xffffffffffffffff, 0x0) 10.871892068s ago: executing program 1 (id=523): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0xe, &(0x7f0000000c00)=ANY=[@ANYBLOB], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x94) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(r0, &(0x7f0000001040)={0xc, {"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", 0x1000}}, 0x375) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000001, 0x6031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ceb000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) ioctl$TCFLSH(0xffffffffffffffff, 0x5608, 0x2) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x40, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000440)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000f36d666666440f38826b410f786b42d1d107b8010000000f01d98fe9d89afd", 0x3d}], 0x1, 0x21, 0x0, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r3, 0x4008ae93, &(0x7f0000000040)=0x1000) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f0000000140)=@x86={0x40, 0x1, 0x10, 0x0, 0x9, 0x0, 0x10, 0x0, 0x0, 0x7f, 0x9, 0x1, 0x0, 0xfffffffc, 0xfffffff8, 0x0, 0xff, 0xff, 0x1}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 10.561673366s ago: executing program 0 (id=524): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffff, 0x3}, 0x6) r1 = syz_init_net_socket$bt_hci(0x1f, 0x5, 0x8) bind(r1, &(0x7f0000000100)=@generic={0x1f, "00000000000001001122334455660101010100"}, 0x32) listen(r1, 0x1) syz_emit_vhci(&(0x7f0000000200)=ANY=[@ANYBLOB="043e100e000100010111223344556601100000"], 0x13) nanosleep(&(0x7f0000000300)={0x0, 0x2faf080}, 0x0) syz_emit_vhci(&(0x7f0000000240)=ANY=[@ANYBLOB="043e1422010001011000010101fb00000000fb00010000"], 0x17) nanosleep(&(0x7f0000000300)={0x0, 0x2faf080}, 0x0) syz_emit_vhci(&(0x7f0000000280)=ANY=[@ANYBLOB="043e111d000000000001010101fb001000014000"], 0x14) nanosleep(&(0x7f0000000300)={0x0, 0x2faf080}, 0x0) syz_emit_vhci(&(0x7f00000002c0)=ANY=[@ANYBLOB="040e06016e20004000"], 0x9) nanosleep(&(0x7f0000000300)={0x0, 0x2faf080}, 0x0) 9.751963786s ago: executing program 3 (id=528): syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = socket$netlink(0x10, 0x3, 0x8) bind$netlink(r0, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000300), 0x4) sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000640)=0xcde, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000680)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={0x44, r3, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x7ff, 0x70}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'syzkaller0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x44}, 0x1, 0x0, 0x0, 0x81}, 0x24044884) 9.414385814s ago: executing program 0 (id=529): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x1, 0x3, 0x9}) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000380)={0x8, 0x4d, 0x2ba8}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000100)={0x1, 0x3, 0x9}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000380)={0x200, 0x51, 0x4, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f00000001c0)={r3}) r4 = syz_open_dev$dri(&(0x7f0000000180), 0xcaf8, 0x40000) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f00000000c0)={0x7, 0x52a1, 0x1e}) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)={0x1, &(0x7f0000000000)=[{0x6, 0xf, 0x0, 0x7fff8000}]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x1, 0x4, 0xe608}) close_range(r5, 0xffffffffffffffff, 0x0) 9.319930707s ago: executing program 1 (id=530): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000300), r1) sendmsg$BATADV_CMD_GET_NEIGHBORS(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)={0x1c, r2, 0x331, 0x70bd2c, 0x25dfdbfb, {0xb}, [@BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x2004c0c1}, 0x8004800) r3 = syz_open_dev$vim2m(&(0x7f0000000080), 0xffffffff, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r3, 0xc02c564a, 0x0) syz_usb_connect$sierra_net(0x0, 0x0, 0x0, 0x0) openat$cgroup_type(0xffffffffffffffff, 0x0, 0x2, 0x0) r4 = openat$nullb(0xffffffffffffff9c, 0x0, 0xa4242, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, r4, 0x0) r5 = syz_usb_connect(0x0, 0x3f, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000d0918108ac051582588f0000000109022d00010000000009040000030b08000009058d67c8002a000009050502000000000009058b6e", @ANYRESOCT], 0x0) syz_usb_ep_write(r5, 0x8d, 0x0, 0x0) dup(0xffffffffffffffff) 8.957955146s ago: executing program 0 (id=532): add_key$keyring(&(0x7f00000003c0), 0x0, 0x0, 0x0, 0xfffffffffffffffa) r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f00000000c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r1, 0xec) shutdown(r0, 0x0) connect$unix(r0, &(0x7f0000000200)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) accept(r1, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) splice(r2, 0x0, r3, 0x0, 0x200006, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="280000001c00010429bd7000ffdbdf2507000000", @ANYRES32=r4, @ANYBLOB="e0ff8b0a0a0002"], 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x24040040) 7.483940443s ago: executing program 5 (id=534): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) request_key(0x0, 0x0, &(0x7f0000000500)='\x8e\x00\x9e\xbb\x1e\x1av\xe8M\x00d\xaaI\x00\x00\x00\x00\x00\x00\t<\xe5u\xedA\xa7\aT\xdd\xd1{\xff\xcb\xdb\xb11\xc2s\xcb\xbf\x04\x00\x00\x00<\xfe\xf9\f\xe6E\b\x00\xd7\x85q\xc4\xab\xbd&\x92\x89(\xf3\"\xceJ\x19\x185\xa6- \xe6uK\xe1D\x8f\x9f\x92\xca\x93#\xf5E\xc2\x91Yl\x17\a\x02\t\x17\x7f\xc4\xde\x04\x9b\x89#\xf6&[\xd81\xb3\xdc\x00\x04\x15\x03\x17R\xd24\xeb\xb5\xc2\xff\x1bnF\x8e\xe4\'\x18\xba9.\xd4\xd9\xc6\x98\x8f\xc6D!p\xbeV\xb7x\r@\x1b5\x8br\x11\xdex\x19\x9e\xdc\x1el\xcd\x13\xb6\xc2\xdb\x1fr2\x7f?\xfe\x0f\x04\x11\xc3\x8f:uXQ\x0f\v\xfc\xea\xd1L\xfb\xa8]\xd4\xd7\x13?\xe3<#\x1f\x9a\x03C\x8f\xe7\rV1\x99\xaf@Re\x18J\xb6\xee\xeeAnR\n\x8a\xe4\x1a:&\xc7\x15B\x8aG\xa4\a`\xee\xaf\x80T\xddo\xc4D^z\xbf\x1c\x87F?!\'\xc3\xf9\xa3\xd9\x85\xddI\x11\x8a\xb1N%\x17\f\xd0#\x05^\xf7\x11\x13\xadKb\x8ck\x10\xd3 >\t\xe0\x16\x80\x82\xb3\xcc\xc7\x05*\x9b\x0eQ\x92\xd7\xbaO\x06\xb2\xdc\xe7/\x1f\x90]IB94(evFMJ\x85\xc4S\xa8\x8b\xbe\xd3\x90\xe9\t\x00\x13\x1e\x9a\x94\x00\x00\x00\x00\x00U\xfbLA\xa6K\xd5\x0eD\xf2Y\xc3,\t4hD\xc4o\xc3\x87$\x9d6\xc8\x93\xa3\x8e:\xfe#\xa0`\xb1k\xacz\xe0\xb3\x95\x17\xdf\xc7\xc2\xedKc\xa3R\x92q.\x8d)\"\x8f\xb2\xc6$s^\xd1vU\x9cB\x00ao\xf1\'\x00', 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x9, 0x4, 0x8, 0xfe, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x16, 0x0, 0x0, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0x7, 0x0, &(0x7f0000000340)='\x00\x00\x00\x00\x00\x00\x00', 0x0, 0x3b66, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000080601080000000000000000010000010500010007"], 0x1c}, 0x1, 0x0, 0x0, 0x40044}, 0x48040) 5.501353572s ago: executing program 1 (id=535): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./dev\x00', 0x1ff) mount(0x0, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0xa) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f00000001c0)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2000002, 0xc3072, 0xffffffffffffffff, 0x200000) capset(&(0x7f0000000100)={0x20071026}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x81, 0xfffffffb}) epoll_create1(0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000500)={0x2c, &(0x7f00000001c0)={0x40, 0x22, 0x2, {0x2, 0x30}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_ep_write(r0, 0x81, 0xf8, &(0x7f00000002c0)="b9425b44651dd23241963599000000110000004a16941ff5f4b4f1f0add7fcf2b877fceafffffffffff1ffdf4cd9f5d3969890522c77157d88010000003a5bd5531d459dffff03000000000091ff000000e8f5b3371da3635b8b4fa637135800001f65e4b436aa9e50bc0f19b7d3372ff9ebcede1fb5e9428f54d5d1f0cc752cf246a5d2da34a5aa97dc14a469c3dd3e26b41c356484e46fd66e3f2c7807e8773eed7b94fa099ab84feadec2ea95f65bba452eae5b0900f98a979a88c517a2dc360a00237723e2f467af706ea17226296b3a10a351cb47aba2c6b836c90679b4dd859ddc9e4800448aab0000000000000d75f34bb50d8d70") write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3f, [0x8000, 0xc95a, 0xf, 0x8, 0x80, 0x2, 0x7, 0x7f, 0x20000006, 0x4c, 0x6, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x4, 0x0, 0x5, 0x4, 0x0, 0x7, 0x3c5b, 0x1, 0x824, 0xd, 0x1, 0x2, 0xffffffff, 0xe661, 0x4, 0x7, 0x3, 0x8, 0x4c74, 0x9, 0x242, 0x3, 0xe, 0x0, 0x80008071, 0x2, 0x17, 0x1, 0x7, 0x5, 0x3e, 0x8c, 0x6, 0x6, 0x0, 0x5, 0x4, 0xfffffffa, 0x3fc, 0x80, 0x0, 0x2, 0x6, 0x80000008, 0x4, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x8004, 0xf292, 0xfffffff3, 0x129432e6, 0xc9, 0xf9, 0x7fff, 0x78, 0x6e7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x31, 0xe, 0x312, 0x78, 0xea4, 0x2, 0x4, 0x7, 0x7fff, 0x6, 0x403, 0x401, 0x6, 0x1, 0xff, 0x5, 0x1000005, 0x5f31, 0xa, 0x4e0, 0x2, 0x4, 0xb, 0x4, 0x9, 0x8, 0x9, 0x6, 0x47, 0x8000, 0x1, 0xfff, 0xffff, 0x2, 0x4, 0x9, 0x3, 0x3, 0x7, 0x1, 0x3, 0x3, 0xbc45, 0x48c93690, 0x42, 0x2], [0x7, 0x408, 0x4, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x6, 0x7ff7, 0x0, 0x1, 0x2, 0xd, 0x5, 0x405, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x303c, 0x3e7, 0xb, 0x5, 0x3e, 0xd9, 0x3, 0x20000009, 0x4, 0x6d01, 0x4, 0x38, 0x800003, 0x200, 0x80, 0x3, 0x5, 0x87c, 0x1002, 0x8, 0x7, 0x953a, 0x5, 0x6, 0x4, 0xbf, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0xa, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x4, 0x25], [0x6, 0xbb33, 0x6, 0xb, 0x5, 0x893a, 0x6, 0x6, 0x0, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x5, 0x3, 0x3, 0x10000, 0x4, 0x7fff, 0xffff, 0xa620, 0x2, 0x5, 0x1, 0x2, 0x14a, 0x60a7, 0x6, 0x16, 0xffffffff, 0x80000000, 0x1, 0x4, 0xc8, 0x1, 0x400, 0x10000, 0x3, 0x7e, 0x800100, 0x9602, 0x7, 0x8af, 0x8, 0x6, 0xa26, 0x5, 0x5, 0x28, 0x30b1d693, 0xa1f, 0xf43, 0x6, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0x1, 0x200, 0xffff3441, 0xfff]}, 0x45c) 5.272029468s ago: executing program 5 (id=536): socket$nl_route(0x10, 0x3, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x2400, 0x0) socket$packet(0x11, 0x2, 0x300) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)) socket$pptp(0x18, 0x1, 0x2) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0001, 0x0) socket$netlink(0x10, 0x3, 0x9) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f00000000c0)=ANY=[@ANYRES8=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000001, 0x12, r1, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_GETKMSGREDIRECT(r2, 0x541c, &(0x7f0000000000)) 5.210091379s ago: executing program 3 (id=537): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r3 = accept(r1, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[], 0xfffffdef}, 0x1, 0x0, 0x0, 0x800}, 0x40010) recvfrom(r2, &(0x7f0000000080)=""/60, 0xfffffffffffffeeb, 0x101, 0x0, 0x0) landlock_restrict_self(0xffffffffffffffff, 0xa) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) 4.941290746s ago: executing program 5 (id=538): pipe(0x0) io_setup(0xfff, &(0x7f00000000c0)) openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) syz_mount_image$iso9660(&(0x7f00000000c0), &(0x7f0000000000)='.\x02\x00', 0x8c48, &(0x7f0000000240)=ANY=[@ANYBLOB='nojoliet,mode=0x00000000000000e4,dmode=0x0000000000000005,check=relaxed,overriderockperm,utf8,mode=0x0000000000000000,nojoliet,cruft,mode=0xfffffffffffffffb,utf8,session=0x0000000000000043,hide,dmode=0x000000000000001f,uid=', @ANYRESDEC, @ANYBLOB="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"], 0x1, 0x5ae, &(0x7f00000004c0)="$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") getdents64(0xffffffffffffffff, &(0x7f0000000f80)=""/4096, 0x1000) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) lchown(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) quotactl_fd$Q_GETNEXTQUOTA(r0, 0xffffffff80000900, 0x0, 0x0) syz_usb_connect$uac1(0x5, 0x72, 0x0, 0x0) syz_usb_connect$cdc_ecm(0x6, 0x4d, &(0x7f0000000a80)={{0x12, 0x1, 0x110, 0x2, 0x0, 0x0, 0xff, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x9, 0x20, 0x3, "", [{{0x9, 0x4, 0x0, 0x1, 0x3, 0x2, 0x6, 0x0, 0x4, {{0x5}, {0x5, 0x24, 0x0, 0x1ef}, {0xd, 0x24, 0xf, 0x1, 0x1000, 0xa07, 0x8, 0xfd}}, {[], {{0x9, 0x5, 0x82, 0x2, 0x8, 0x1, 0x3, 0x5}}, {{0x9, 0x5, 0x3, 0x2, 0x400, 0x7, 0x4b, 0xc}}}}}]}}]}}, &(0x7f0000000e40)={0x0, 0x0, 0x48, 0x0}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, 0x0, 0x20000000) 4.443990689s ago: executing program 0 (id=539): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000480)=ANY=[@ANYBLOB="6c0000001000010400d201000072f60000020000", @ANYRES32=r4, @ANYBLOB="05"], 0x6c}, 0x1, 0x0, 0x0, 0x10004000}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="780000001000830404000000fedbdf2500007400", @ANYRES32=r2, @ANYBLOB="0008000007500500580012800b0001006272696467650000480002800500190002000000050017"], 0x78}, 0x1, 0x0, 0x0, 0x800}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x0, 0x0, 0x0}, 0x94) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x18, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x9}, 0x0) fstatfs(r0, &(0x7f00000006c0)=""/4096) 3.99869281s ago: executing program 0 (id=540): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000002c0)='mountinfo\x00') r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)={0x20000019}) syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f00000009c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1404c, &(0x7f00000007c0)={[{@noload}, {@resgid}, {@inlinecrypt}, {@usrquota}, {@discard}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x3}}, {@min_batch_time={'min_batch_time', 0x3d, 0x7}}, {@test_dummy_encryption_v1}, {@noblock_validity}]}, 0x5, 0x491, &(0x7f0000000300)="$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") r2 = getpid() r3 = syz_pidfd_open(r2, 0x0) setns(r3, 0x24020000) mkdir(&(0x7f0000001c00)='./file0\x00', 0x0) mount$bind(&(0x7f0000000c40)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x290d010, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x89901) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0xa65400, 0x0) 3.879486163s ago: executing program 3 (id=541): mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x34000, 0x0) ioctl$FE_GET_PROPERTY(0xffffffffffffffff, 0x80106f53, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, &(0x7f0000000040)=@IORING_OP_CLOSE={0x13, 0x48}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x300000a, 0x4031, 0xffffffffffffffff, 0x0) openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) 3.785612815s ago: executing program 5 (id=542): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = syz_open_dev$sndctrl(&(0x7f0000000240), 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r4, 0xc1105511, &(0x7f0000000300)={{0x5, 0x0, 0x4, 0x0, '\x00', 0x1ff}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) 2.437726829s ago: executing program 33 (id=507): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r1) getsockname$packet(r1, &(0x7f00000005c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000580)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000200000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x4) sendmsg$IPVS_CMD_SET_INFO(r5, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r5, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x66) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001440)=@newlink={0x50, 0x10, 0xffffff1f, 0x0, 0x80, {0x0, 0x0, 0x0, 0x0, 0x300, 0x17e05}, [@IFLA_MASTER={0x8, 0xa, r6}, @IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x4000, 0x640}}}}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="a4280400000000001400350076657468305f746f5f626f6e6400000008000a00", @ANYRES32=r2], 0x3c}, 0x1, 0x0, 0x0, 0x4008800}, 0x8000) sendmsg$nl_route(r0, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f00000000c0)=@setlink={0x2c, 0x13, 0x5, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r2, 0x312, 0x800}, [@IFLA_ADDRESS={0xa, 0x1, @remote}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x42) 2.41219078s ago: executing program 5 (id=544): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$unix(0x1, 0x2, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={0x44, r3, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x10001, 0x70}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'dvmrp1\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x4090}, 0x24044804) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000100)=0x1800, 0x4) socket$nl_route(0x10, 0x3, 0x0) syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000040)='./file1\x00', 0x2204000, &(0x7f0000000100)=ANY=[], 0x3, 0x151f, &(0x7f0000001d80)="$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") mknod$loop(&(0x7f0000000380)='./file0\x00', 0x2, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000040)={'syz_tun\x00', &(0x7f0000000180)=@ethtool_link_settings={0x4d, 0x600, 0xf, 0x80, 0x0, 0x0, 0xfc, 0x1, 0x80, 0x4, [0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x4]}}) 2.156003956s ago: executing program 3 (id=545): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f0000000040)="040000000000", 0x6) write(r0, &(0x7f0000000080)="05000000010000", 0x7) nanosleep(&(0x7f0000000300)={0x0, 0x5f5e100}, 0x0) write(r0, &(0x7f00000000c0)="05000000010001", 0x7) nanosleep(&(0x7f0000000300)={0x0, 0x5f5e100}, 0x0) write(r0, &(0x7f0000000100)="09000000010001", 0x7) syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="043e130100c9000100aaaaaaaaaa1110000000400000"], 0x17) syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="043e0c0400c9000000000000000000"], 0xf) syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYBLOB="02c9000b000700060001030000100101"], 0x10) syz_emit_vhci(&(0x7f0000000200)=ANY=[@ANYBLOB="02c9200b000700060001030000100101"], 0x10) write(r0, &(0x7f0000000240)="190000000800aaaaaaaaaa110103", 0xe) nanosleep(&(0x7f0000000300)={0x0, 0x5f5e100}, 0x0) 2.070446578s ago: executing program 1 (id=546): socket$nl_route(0x10, 0x3, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$kcm(0x11, 0x200000000000002, 0x300) r0 = socket$packet(0x11, 0x2, 0x300) socket$can_j1939(0x1d, 0x2, 0x7) openat$ppp(0xffffffffffffff9c, &(0x7f0000000140), 0x40e40, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socketpair(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) bind$packet(r0, &(0x7f00000000c0)={0x11, 0xd, r2, 0x1, 0x81, 0x6, @broadcast}, 0x14) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x0, 0x0, 0xffffffff}, 0x1c) 1.780213366s ago: executing program 0 (id=547): syz_mount_image$btrfs(&(0x7f00000004c0), &(0x7f00000015c0)='./file0\x00', 0x10, &(0x7f0000000080)={[{@notreelog}]}, 0x0, 0x559e, &(0x7f00000103c0)="$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") tkill(0x0, 0x12) chdir(&(0x7f0000000240)='./file0\x00') syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./bus\x00', 0x400e, &(0x7f0000000280)={[{@i_version}, {@nobh}, {@data_err_ignore}, {@nolazytime}, {@init_itable_val={'init_itable', 0x3d, 0x4}}, {@acl}]}, 0x1, 0x42f, &(0x7f0000000940)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0) ftruncate(r1, 0x2000009) write$cgroup_int(r0, &(0x7f00000000c0), 0x12) write$binfmt_script(r1, &(0x7f0000000140), 0xfcb8) socket(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, 0x0, 0x0}, 0x94) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000c80)='./file1\x00', 0x210040, &(0x7f0000000500)={[{@barrier}, {}, {@journal_checksum}, {@norecovery}, {@grpquota}, {@lazytime}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@dioread_lock}, {@acl}, {@bsdgroups}, {@journal_checksum}]}, 0xfc, 0x572, &(0x7f0000003780)="$eJzs3d9rW1UcAPDvTdPup66DMdQHGezByVy6tv6YIDgfRYcDfZ+hvSuj6TKadKx14PbgXnyRIYg4EP8A330c/gP+FQMdDBlFH0So3PSmy9qkv5aZbPl84Lbn5N7bc78593t7Tm5CAhhYx7IfhYiXI+KbJOJQy7pi5CuPrW63/PD6VLYksbLy6Z9JJPljze2T/PeBvPJSRPz6VcTJwsZ2a4tLs+VKJZ3P62P1uStjtcWlU5fmyjPpTHp5YnLyzFuTE+++83bXYn39/N/ff3L3wzNfH1/+7uf7h28ncTYO5uta43gCN1orx8r/5qXhOLtuw/EuNNZPkl4fALsylOf5cGTXgEMxlGc98Pz7MiJWgAGVyH8YUM1xQHNu36V58DPjwQerE6BG7COt8RdXXxuJvY250f7l5LGZUTbfHe1C+1kbv/xx53a2xOavQ+zbog6wIzduRsTpYnHj9T/Jr3+7d7rx4vHm1rcxaP9/oJfuZuOfN9qN/wpr459oM/450CZ3d2Pr/C/c70IzHWXjv/fajn/XLl2jQ3nthcaYbzi5eKmSno6IFyPiRAzvyeqb3c85s3xvpdO61vFftmTtN8eC+XHcL+55fJ/pcr0cESNPEnfTg5sRrxTbxZ+s9X/Spv+z5+P8Nts4mt55tdO6reN/ulZ+initbf8/uqOVbH5/cqxxPow1z4qN/rp19LdO7fc6/qz/928e/2jSer+2tvM2ftz7T9pp3W7P/5Hks0a5mQTXyvX6/HjESPLxxscnHu3brDe3z+I/cXzz61+78z+bfH2+zfhvHbnVcdN+6P/pHfX/zgv3Pvrih07tb6//32yUTuSP5Ne/9vJzZbsH+KTPHwAAAAAAAPSTQkQcjKRQWisXCqXS6vs7jsT+QqVaq5+8WF24PB2Nz8qOxnCheaf7UMv7Icbz98M26xPr6pMRcTgivh3a16iXpqqV6V4HDwAAAAAAAAAAAAAAAAAAAH3iQIfP/2d+H+r10QFPXeOLDfb0+iiAXtjyK/+78U1PQF/aMv+B55b8h8El/2FwyX8YXPIfBpf8h8El/2FwyX8AAAAAAAAAAAAAAAAAAAAAAAAAAADoqvPnzmXLyvLD61NZffrq4sJs9eqp6bQ2W5pbmCpNVeevlGaq1ZlKWpqqzm319yrV6pXxiVi4NlZPa/Wx2uLShbnqwuX6hUtz5Zn0Qjr8v0QFAAAAAAAAAAAAAAAAAAAAz5ba4tJsuVJJ5xU6Ft6PvjiMpxngql3tXuyXKBQ6FG7m3buzvXp4UQIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAdf4LAAD//++4Mnc=") socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) 1.277268588s ago: executing program 3 (id=548): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000008340)={0x2020, 0x0, 0x0}, 0x206f) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x34014c40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000001d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000012c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x0, 0x0, {0x0, 0x1b}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0, 0x0) umount2(&(0x7f00000002c0)='./file0\x00', 0xb) read$FUSE(r2, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x8, 0x6, &(0x7f0000006680)) ioperm(0x9, 0x6, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000080)='source', &(0x7f0000000400)='//\xf2/\x06\b\xa30\\\xea\\\xea\x95\x9a\x82\x10\x97W\x8f7\x98\\\\/\\\xf9\rmD\x94)U\xdb\x15X.I\n}\xf3\x9d\xe4_\x05\x9cqf4I^#b?9\xde\xafu\'\x83L\xe0\x97\xe1n_\xa4%\xb1\x97\x93\xafv\xce/\\\xb4L\xf2_\xa7\xfb\xf4\x84\x1fA\xeas\x9d\x14\xe3\v\xa3!\xfb\x93\xd7R\xab2\x1eW\xe9h\x9b\xf7Gl\xf9D\xd4\x82X5\x13\xaa\x87\xf9\xba\xa9m\x14\x14R_\x9a\\>4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6\xc5n\xeb\xab\xf70\x99\n\x8c [ 76.271709][ T4355] dump_stack_lvl+0x188/0x24e [ 76.276486][ T4355] ? show_regs_print_info+0x12/0x12 [ 76.281729][ T4355] ? load_image+0x410/0x410 [ 76.286271][ T4355] ? __might_sleep+0xd0/0xd0 [ 76.291095][ T4355] ? __lock_acquire+0x7ea0/0x7ea0 [ 76.296164][ T4355] should_fail_ex+0x390/0x4c0 [ 76.301155][ T4355] should_failslab+0x5/0x20 [ 76.305778][ T4355] slab_pre_alloc_hook+0x59/0x300 [ 76.310929][ T4355] ? key_user_lookup+0x1b8/0x450 [ 76.315994][ T4355] kmem_cache_alloc+0x56/0x2f0 [ 76.320872][ T4355] ? key_alloc+0x302/0x1030 [ 76.325397][ T4355] key_alloc+0x302/0x1030 [ 76.329765][ T4355] ? clear_nonspinnable+0x60/0x60 [ 76.334809][ T4355] keyring_alloc+0x41/0xa0 [ 76.339239][ T4355] keyctl_get_persistent+0x4a0/0x780 [ 76.344571][ T4355] ? proc_key_users_show+0x310/0x310 [ 76.349884][ T4355] ? futex_wake_mark+0x150/0x150 [ 76.355086][ T4355] ? __lock_acquire+0x7ea0/0x7ea0 [ 76.360231][ T4355] __se_sys_keyctl+0x59f/0x870 [ 76.365006][ T4355] ? __x64_sys_keyctl+0xc0/0xc0 [ 76.369973][ T4355] ? do_futex+0x2e2/0x320 [ 76.374306][ T4355] ? __ia32_sys_get_robust_list+0x100/0x100 [ 76.380209][ T4355] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 76.386291][ T4355] ? lock_chain_count+0x20/0x20 [ 76.391238][ T4355] ? lockdep_hardirqs_on+0x94/0x140 [ 76.396619][ T4355] ? __x64_sys_keyctl+0x1c/0xc0 [ 76.401668][ T4355] do_syscall_64+0x4c/0xa0 [ 76.406124][ T4355] ? clear_bhb_loop+0x60/0xb0 [ 76.410911][ T4355] ? clear_bhb_loop+0x60/0xb0 [ 76.415614][ T4355] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 76.421509][ T4355] RIP: 0033:0x7f147779e1d9 [ 76.425925][ T4355] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 76.445596][ T4355] RSP: 002b:00007f14786f5028 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 76.454112][ T4355] RAX: ffffffffffffffda RBX: 00007f1477a25fa0 RCX: 00007f147779e1d9 [ 76.462109][ T4355] RDX: fffffffffffffffd RSI: ffffffffffffffff RDI: 0000000000000016 [ 76.470189][ T4355] RBP: 00007f1477835888 R08: 0000000000000000 R09: 0000000000000000 [ 76.478174][ T4355] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 76.486172][ T4355] R13: 00007f1477a26038 R14: 00007f1477a25fa0 R15: 00007ffe202437a8 [ 76.494183][ T4355] [ 76.530467][ T2967] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 76.546324][ T4359] device bridge0 entered promiscuous mode [ 76.563115][ T4359] device vlan2 entered promiscuous mode [ 76.592053][ T49] Bluetooth: hci0: command 0x0419 tx timeout [ 76.593032][ T4289] Bluetooth: hci2: command 0x0419 tx timeout [ 76.602257][ T49] Bluetooth: hci3: command 0x0419 tx timeout [ 76.605102][ T4281] Bluetooth: hci4: command 0x0419 tx timeout [ 76.610903][ T4283] Bluetooth: hci1: command 0x0419 tx timeout [ 76.643925][ T57] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.654812][ T57] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.676362][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 76.714543][ T57] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.742588][ T57] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.751491][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.764710][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.786247][ T2967] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 76.804684][ T2967] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 77.013629][ T4372] syz.1.8 uses obsolete (PF_INET,SOCK_PACKET) [ 77.047479][ T4373] loop2: detected capacity change from 0 to 512 [ 77.118445][ T4373] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 77.178669][ T4373] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 77.297076][ T4373] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #16: comm syz.2.3: invalid indirect mapped block 4294967295 (level 0) [ 77.428828][ T4373] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #16: comm syz.2.3: invalid indirect mapped block 4294967295 (level 1) [ 77.475932][ T4373] EXT4-fs (loop2): 1 orphan inode deleted [ 77.492115][ T4373] EXT4-fs (loop2): 1 truncate cleaned up [ 77.498020][ T4373] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 77.992684][ T4396] loop0: detected capacity change from 0 to 1024 [ 78.789428][ T4283] Bluetooth: Wrong link type (-22) [ 79.042025][ T14] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 79.179163][ T4275] EXT4-fs (loop2): unmounting filesystem. [ 79.262813][ T14] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 79.281705][ T14] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 79.300162][ T4412] netlink: 4 bytes leftover after parsing attributes in process `syz.2.17'. [ 79.313463][ T14] usb 5-1: New USB device found, idVendor=0bda, idProduct=0129, bcdDevice= 1.00 [ 79.333278][ T14] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 79.490560][ T4418] loop0: detected capacity change from 0 to 128 [ 79.571421][ T4418] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 79.648046][ T4418] ext4 filesystem being mounted at /4/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 79.666411][ T4425] device syzkaller0 entered promiscuous mode [ 80.658599][ T14] usb 5-1: USB disconnect, device number 2 [ 80.869164][ T4431] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.877683][ T4431] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.921134][ T4436] Zero length message leads to an empty skb [ 80.946219][ T4274] EXT4-fs (loop0): unmounting filesystem. [ 81.111422][ T4438] loop0: detected capacity change from 0 to 512 [ 81.178264][ T4438] EXT4-fs error (device loop0): ext4_quota_enable:7045: comm syz.0.22: Bad quota inum: 1, type: 2 [ 81.210893][ T4438] EXT4-fs warning (device loop0): ext4_enable_quotas:7093: Failed to enable quota tracking (type=2, err=-117, ino=1). Please run e2fsck to fix. [ 81.295152][ T4438] EXT4-fs (loop0): mount failed [ 81.527671][ T4431] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 81.568654][ T4431] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 81.860889][ T4431] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.869932][ T4431] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.879995][ T4431] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.889582][ T4431] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.046609][ T4453] IPVS: sync thread started: state = MASTER, mcast_ifn = lo, syncid = 0, id = 0 [ 82.190478][ T4457] netlink: 28 bytes leftover after parsing attributes in process `syz.3.28'. [ 82.210740][ T4457] netlink: 28 bytes leftover after parsing attributes in process `syz.3.28'. [ 82.236075][ T4457] device ip6gretap0 entered promiscuous mode [ 82.264304][ T4457] device syz_tun entered promiscuous mode [ 82.285298][ T4398] IPv6: ADDRCONF(NETDEV_CHANGE): hsr1: link becomes ready [ 82.483330][ T4472] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 82.826799][ T4481] netlink: 4 bytes leftover after parsing attributes in process `syz.3.37'. [ 82.891888][ T0] NOHZ tick-stop error: local softirq work is pending, handler #30a!!! [ 82.961900][ T0] NOHZ tick-stop error: local softirq work is pending, handler #10a!!! [ 82.991898][ T0] NOHZ tick-stop error: local softirq work is pending, handler #38a!!! [ 83.171946][ T0] NOHZ tick-stop error: local softirq work is pending, handler #10a!!! [ 83.191899][ T0] NOHZ tick-stop error: local softirq work is pending, handler #10a!!! [ 83.261902][ T0] NOHZ tick-stop error: local softirq work is pending, handler #108!!! [ 86.462165][ T4537] loop3: detected capacity change from 0 to 8 [ 86.537605][ T4537] unable to read xattr id index table [ 86.768411][ T33] cfg80211: failed to load regulatory.db [ 87.257989][ T4539] loop3: detected capacity change from 0 to 1024 [ 87.426979][ T4539] ======================================================= [ 87.426979][ T4539] WARNING: The mand mount option has been deprecated and [ 87.426979][ T4539] and is ignored by this kernel. Remove the mand [ 87.426979][ T4539] option from the mount to silence this warning. [ 87.426979][ T4539] ======================================================= [ 87.499592][ T4530] loop0: detected capacity change from 0 to 512 [ 87.547947][ T4530] FAT-fs (loop0): Directory bread(block 199916) failed [ 87.584323][ T4530] FAT-fs (loop0): Directory bread(block 199917) failed [ 87.606166][ T4530] FAT-fs (loop0): Directory bread(block 199918) failed [ 87.670791][ T4530] FAT-fs (loop0): Directory bread(block 199919) failed [ 87.698920][ T4530] FAT-fs (loop0): Directory bread(block 199920) failed [ 87.715791][ T4544] netlink: 'syz.4.55': attribute type 1 has an invalid length. [ 87.761983][ T4544] netlink: 'syz.4.55': attribute type 4 has an invalid length. [ 87.781246][ T4530] FAT-fs (loop0): Directory bread(block 199921) failed [ 87.822280][ T4530] FAT-fs (loop0): Directory bread(block 199922) failed [ 87.829227][ T4530] FAT-fs (loop0): Directory bread(block 199923) failed [ 87.838325][ T4544] netlink: 9462 bytes leftover after parsing attributes in process `syz.4.55'. [ 87.885575][ T4539] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 87.894429][ T4547] netlink: 'syz.4.55': attribute type 1 has an invalid length. [ 87.958485][ T4530] FAT-fs (loop0): FAT read failed (blocknr 128) [ 87.977980][ T4547] netlink: 'syz.4.55': attribute type 4 has an invalid length. [ 88.042452][ T4539] ext4 filesystem being mounted at /12/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 88.086690][ T4547] netlink: 9491 bytes leftover after parsing attributes in process `syz.4.55'. [ 88.195066][ T4539] EXT4-fs (loop3): unmounting filesystem. [ 88.601797][ T4564] netlink: 'syz.0.61': attribute type 4 has an invalid length. [ 88.615123][ T4566] netlink: 64 bytes leftover after parsing attributes in process `syz.4.62'. [ 88.704159][ T4569] netlink: 'syz.0.61': attribute type 4 has an invalid length. [ 89.267561][ T4283] Bluetooth: hci4: unexpected event 0x03 length: 1 < 11 [ 89.454307][ T4577] mmap: syz.2.63 (4577) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 89.743537][ T4568] loop2: detected capacity change from 0 to 512 [ 89.868051][ T4568] FAT-fs (loop2): error, fat_free: invalid cluster chain (i_pos 548) [ 89.898487][ T4568] FAT-fs (loop2): Filesystem has been set read-only [ 90.311990][ T33] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 90.433348][ T4591] loop0: detected capacity change from 0 to 1024 [ 90.441544][ T4591] EXT4-fs: Ignoring removed orlov option [ 90.507220][ T33] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 90.525596][ T33] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 90.555148][ T33] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 90.594502][ T4591] EXT4-fs error (device loop0): ext4_ext_check_inode:520: inode #2: comm syz.0.71: pblk 0 bad header/extent: invalid magic - magic f300, entries 1, max 4(0), depth 0(0) [ 90.596942][ T33] usb 5-1: config 0 descriptor?? [ 90.637501][ T4591] EXT4-fs (loop0): get root inode failed [ 90.645512][ T4591] EXT4-fs (loop0): mount failed [ 90.715401][ T33] pwc: Askey VC010 type 2 USB webcam detected. [ 90.744558][ T4591] FAULT_INJECTION: forcing a failure. [ 90.744558][ T4591] name failslab, interval 1, probability 0, space 0, times 0 [ 90.758033][ T4591] CPU: 0 PID: 4591 Comm: syz.0.71 Not tainted syzkaller #0 [ 90.765352][ T4591] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 90.775445][ T4591] Call Trace: [ 90.778722][ T4591] [ 90.781644][ T4591] dump_stack_lvl+0x188/0x24e [ 90.786361][ T4591] ? show_regs_print_info+0x12/0x12 [ 90.791549][ T4591] ? load_image+0x410/0x410 [ 90.796041][ T4591] ? __might_sleep+0xd0/0xd0 [ 90.800618][ T4591] ? __lock_acquire+0x7ea0/0x7ea0 [ 90.805637][ T4591] should_fail_ex+0x390/0x4c0 [ 90.810400][ T4591] should_failslab+0x5/0x20 [ 90.814890][ T4591] slab_pre_alloc_hook+0x59/0x300 [ 90.820011][ T4591] kmem_cache_alloc+0x56/0x2f0 [ 90.824778][ T4591] ? new_userfaultfd+0x83/0x310 [ 90.829628][ T4591] new_userfaultfd+0x83/0x310 [ 90.834585][ T4591] ? __x64_sys_userfaultfd+0x5c/0x90 [ 90.839976][ T4591] __x64_sys_userfaultfd+0x7d/0x90 [ 90.845081][ T4591] do_syscall_64+0x4c/0xa0 [ 90.850027][ T4591] ? clear_bhb_loop+0x60/0xb0 [ 90.854780][ T4591] ? clear_bhb_loop+0x60/0xb0 [ 90.859459][ T4591] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 90.866404][ T4591] RIP: 0033:0x7f63e019e1d9 [ 90.870809][ T4591] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 90.890495][ T4591] RSP: 002b:00007f63e0feb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000143 [ 90.898926][ T4591] RAX: ffffffffffffffda RBX: 00007f63e0425fa0 RCX: 00007f63e019e1d9 [ 90.906895][ T4591] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 90.914854][ T4591] RBP: 00007f63e0235888 R08: 0000000000000000 R09: 0000000000000000 [ 90.922810][ T4591] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 90.930782][ T4591] R13: 00007f63e0426038 R14: 00007f63e0425fa0 R15: 00007fffa59b44c8 [ 90.938763][ T4591] [ 91.010201][ T33] pwc: send_video_command error -71 [ 91.045176][ T33] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 91.059510][ T33] Philips webcam: probe of 5-1:0.0 failed with error -71 [ 91.085988][ T33] usb 5-1: USB disconnect, device number 3 [ 91.421078][ T4610] loop1: detected capacity change from 0 to 1024 [ 91.460392][ T4612] loop2: detected capacity change from 0 to 1024 [ 91.478799][ T4610] EXT4-fs: Ignoring removed bh option [ 91.502018][ T22] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 91.573016][ T4612] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 91.624812][ T4610] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 91.697866][ T33] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 91.711044][ T26] audit: type=1804 audit(1791496079.724:2): pid=4610 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.76" name="/newroot/17/file1/bus" dev="loop1" ino=18 res=1 errno=0 [ 91.740301][ T22] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 91.759871][ T22] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 91.782322][ T22] usb 4-1: Product: syz [ 91.786544][ T22] usb 4-1: Manufacturer: syz [ 91.802323][ T22] usb 4-1: SerialNumber: syz [ 91.827135][ T4275] EXT4-fs (loop2): unmounting filesystem. [ 91.886899][ T33] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 91.951759][ T33] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 91.994479][ T33] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 92.031608][ T22] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -32 [ 92.048798][ T33] usb 5-1: config 0 descriptor?? [ 92.066973][ T22] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -32 [ 92.075988][ T4627] loop2: detected capacity change from 0 to 1024 [ 92.084103][ T33] pwc: Askey VC010 type 2 USB webcam detected. [ 92.179116][ T4627] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 92.338694][ T4275] EXT4-fs (loop2): unmounting filesystem. [ 92.482996][ T33] pwc: recv_control_msg error -32 req 02 val 2b00 [ 92.496160][ T33] pwc: recv_control_msg error -32 req 02 val 2700 [ 92.496791][ T4581] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 92.535023][ T4272] EXT4-fs (loop1): unmounting filesystem. [ 92.567210][ T4581] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 92.666881][ T33] pwc: recv_control_msg error -32 req 02 val 2c00 [ 92.697700][ T33] pwc: recv_control_msg error -32 req 04 val 1000 [ 92.718002][ T33] pwc: recv_control_msg error -32 req 04 val 1300 [ 92.740478][ T33] pwc: recv_control_msg error -32 req 04 val 1400 [ 92.769953][ T4635] netlink: 'syz.1.82': attribute type 1 has an invalid length. [ 92.967844][ T33] pwc: recv_control_msg error -71 req 02 val 2100 [ 92.984811][ T33] pwc: recv_control_msg error -71 req 04 val 1500 [ 92.999504][ T33] pwc: recv_control_msg error -71 req 02 val 2500 [ 93.013664][ T33] pwc: recv_control_msg error -71 req 02 val 2400 [ 93.022821][ T33] pwc: recv_control_msg error -71 req 02 val 2600 [ 93.032466][ T33] pwc: recv_control_msg error -71 req 02 val 2900 [ 93.042353][ T33] pwc: recv_control_msg error -71 req 02 val 2800 [ 93.049370][ T33] pwc: recv_control_msg error -71 req 04 val 1100 [ 93.056961][ T33] pwc: recv_control_msg error -71 req 04 val 1200 [ 93.070706][ T33] pwc: Registered as video103. [ 93.080678][ T33] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input5 [ 93.111105][ T33] usb 5-1: USB disconnect, device number 4 [ 93.240939][ T4645] netlink: 4 bytes leftover after parsing attributes in process `syz.1.85'. [ 93.251899][ T0] NOHZ tick-stop error: local softirq work is pending, handler #28a!!! [ 93.726491][ T22] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000080. ret = -71 [ 93.751244][ T22] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 93.773960][ T4654] loop0: detected capacity change from 0 to 512 [ 93.795510][ T22] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 93.833933][ T4654] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 93.855508][ T22] lan78xx: probe of 4-1:1.0 failed with error -71 [ 93.895008][ T22] usb 4-1: USB disconnect, device number 2 [ 93.898929][ T4654] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.89: invalid indirect mapped block 256 (level 2) [ 93.937457][ T4652] loop4: detected capacity change from 0 to 8192 [ 93.974507][ T4652] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 94.046557][ T4654] EXT4-fs (loop0): 2 truncates cleaned up [ 94.052871][ T4654] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 94.200614][ T26] audit: type=1800 audit(1791496082.214:3): pid=4654 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.89" name="file1" dev="loop0" ino=15 res=0 errno=0 [ 94.293672][ T26] audit: type=1800 audit(1791496082.314:4): pid=4662 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.89" name="file1" dev="loop0" ino=15 res=0 errno=0 [ 94.552450][ T4665] binder: 4664:4665 ioctl c0306201 2000000002c0 returned -14 [ 94.839220][ T4523] EXT4-fs error (device loop0): ext4_validate_block_bitmap:429: comm kworker/u4:10: bg 0: block 5: invalid block bitmap [ 94.888698][ T4523] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1784 with error 28 [ 94.912807][ T4523] EXT4-fs (loop0): This should not happen!! Data will be lost [ 94.912807][ T4523] [ 94.928049][ T4523] EXT4-fs (loop0): Total free blocks count 0 [ 94.934713][ T4523] EXT4-fs (loop0): Free/Dirty block details [ 94.941056][ T4523] EXT4-fs (loop0): free_blocks=0 [ 94.955169][ T4523] EXT4-fs (loop0): dirty_blocks=1784 [ 94.964608][ T4523] EXT4-fs (loop0): Block reservation details [ 94.970675][ T4523] EXT4-fs (loop0): i_reserved_data_blocks=1784 [ 95.035642][ T4274] EXT4-fs (loop0): unmounting filesystem. [ 95.387068][ T4690] loop0: detected capacity change from 0 to 1024 [ 96.393899][ T4713] FAULT_INJECTION: forcing a failure. [ 96.393899][ T4713] name fail_futex, interval 1, probability 0, space 0, times 1 [ 96.431278][ T4713] CPU: 0 PID: 4713 Comm: syz.0.101 Not tainted syzkaller #0 [ 96.438636][ T4713] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 96.448706][ T4713] Call Trace: [ 96.452069][ T4713] [ 96.454995][ T4713] dump_stack_lvl+0x188/0x24e [ 96.459671][ T4713] ? tcp_recvmsg+0x21d/0x820 [ 96.464257][ T4713] ? show_regs_print_info+0x12/0x12 [ 96.469475][ T4713] ? load_image+0x410/0x410 [ 96.474071][ T4713] ? __local_bh_enable_ip+0x136/0x1c0 [ 96.479446][ T4713] ? _local_bh_enable+0xa0/0xa0 [ 96.484732][ T4713] should_fail_ex+0x390/0x4c0 [ 96.489411][ T4713] get_futex_key+0x1b1/0x1000 [ 96.494082][ T4713] ? tcp_recv_timestamp+0x720/0x720 [ 96.499279][ T4713] ? aa_sk_perm+0x81f/0x950 [ 96.503776][ T4713] ? futex_setup_timer+0xc0/0xc0 [ 96.508895][ T4713] futex_wake+0x123/0x4f0 [ 96.513264][ T4713] ? inet_sendpage+0x2e0/0x2e0 [ 96.518037][ T4713] ? futex_wake_mark+0x150/0x150 [ 96.523173][ T4713] ? __sys_recvfrom+0x3ee/0x4c0 [ 96.528098][ T4713] do_futex+0x2e2/0x320 [ 96.532273][ T4713] ? __ia32_sys_get_robust_list+0x100/0x100 [ 96.538194][ T4713] __se_sys_futex+0x381/0x410 [ 96.542873][ T4713] ? __x64_sys_futex+0xf0/0xf0 [ 96.547636][ T4713] ? __x64_sys_futex+0x1d/0xf0 [ 96.552395][ T4713] do_syscall_64+0x4c/0xa0 [ 96.556817][ T4713] ? clear_bhb_loop+0x60/0xb0 [ 96.561540][ T4713] ? clear_bhb_loop+0x60/0xb0 [ 96.566218][ T4713] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 96.572199][ T4713] RIP: 0033:0x7f63e019e1d9 [ 96.576690][ T4713] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 96.596488][ T4713] RSP: 002b:00007f63e0feb0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 96.604918][ T4713] RAX: ffffffffffffffda RBX: 00007f63e0425fa8 RCX: 00007f63e019e1d9 [ 96.612908][ T4713] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f63e0425fac [ 96.620913][ T4713] RBP: 00007f63e0425fa0 R08: 0015e38f62dc5590 R09: 0000000000000000 [ 96.628920][ T4713] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 96.636917][ T4713] R13: 00007f63e0426038 R14: 00007fffa59b43e0 R15: 00007fffa59b44c8 [ 96.644903][ T4713] [ 97.209097][ T4729] netlink: 'syz.1.105': attribute type 1 has an invalid length. [ 97.237833][ T4731] loop4: detected capacity change from 0 to 128 [ 97.320956][ T4731] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 97.359350][ T4731] ext4 filesystem being mounted at /18/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 97.426649][ T4273] EXT4-fs (loop4): unmounting filesystem. [ 97.611040][ T4738] FAULT_INJECTION: forcing a failure. [ 97.611040][ T4738] name failslab, interval 1, probability 0, space 0, times 0 [ 97.625202][ T4738] CPU: 1 PID: 4738 Comm: syz.4.107 Not tainted syzkaller #0 [ 97.632614][ T4738] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 97.642874][ T4738] Call Trace: [ 97.646179][ T4738] [ 97.649138][ T4738] dump_stack_lvl+0x188/0x24e [ 97.653944][ T4738] ? show_regs_print_info+0x12/0x12 [ 97.659185][ T4738] ? load_image+0x410/0x410 [ 97.663808][ T4738] ? __might_sleep+0xd0/0xd0 [ 97.668430][ T4738] ? __lock_acquire+0x7ea0/0x7ea0 [ 97.673504][ T4738] should_fail_ex+0x390/0x4c0 [ 97.678233][ T4738] should_failslab+0x5/0x20 [ 97.682808][ T4738] slab_pre_alloc_hook+0x59/0x300 [ 97.687873][ T4738] ? snd_seq_prioq_new+0x43/0x90 [ 97.692820][ T4738] __kmem_cache_alloc_node+0x4f/0x270 [ 97.698312][ T4738] ? snd_seq_prioq_new+0x43/0x90 [ 97.703257][ T4738] kmalloc_trace+0x26/0xe0 [ 97.707672][ T4738] snd_seq_prioq_new+0x43/0x90 [ 97.712922][ T4738] snd_seq_queue_alloc+0x137/0x740 [ 97.718150][ T4738] snd_seq_ioctl_create_queue+0x7b/0x3b0 [ 97.723996][ T4738] ? snd_seq_ioctl_unsubscribe_port+0x6d0/0x6d0 [ 97.730245][ T4738] snd_seq_oss_open+0x622/0xf00 [ 97.735111][ T4738] ? snd_seq_oss_delete_client+0x50/0x50 [ 97.741163][ T4738] ? trace_raw_output_contention_end+0xd0/0xd0 [ 97.747436][ T4738] ? odev_open+0x58/0x90 [ 97.751683][ T4738] ? __lock_acquire+0x7ea0/0x7ea0 [ 97.756811][ T4738] ? snd_seq_oss_process_event+0x2910/0x2910 [ 97.762893][ T4738] ? async_call_lookup_ports+0x10/0x10 [ 97.768451][ T4738] ? do_raw_spin_unlock+0x11d/0x230 [ 97.773847][ T4738] ? soundcore_open+0x309/0x4b0 [ 97.778803][ T4738] odev_open+0x63/0x90 [ 97.783015][ T4738] chrdev_open+0x585/0x5f0 [ 97.787801][ T4738] ? cd_forget+0x160/0x160 [ 97.792421][ T4738] ? fsnotify_perm+0x39b/0x550 [ 97.797209][ T4738] ? cd_forget+0x160/0x160 [ 97.801637][ T4738] do_dentry_open+0x7dd/0x10b0 [ 97.806445][ T4738] path_openat+0x2674/0x2f10 [ 97.811059][ T4738] ? kasan_set_track+0x60/0x70 [ 97.815919][ T4738] ? verify_lock_unused+0x140/0x140 [ 97.821137][ T4738] ? do_sys_openat2+0xdd/0x4f0 [ 97.825943][ T4738] ? do_filp_open+0x420/0x420 [ 97.831119][ T4738] do_filp_open+0x1ee/0x420 [ 97.835746][ T4738] ? vfs_tmpfile+0x470/0x470 [ 97.840483][ T4738] ? _raw_spin_unlock+0x24/0x40 [ 97.845368][ T4738] ? alloc_fd+0x590/0x640 [ 97.849725][ T4738] do_sys_openat2+0x14b/0x4f0 [ 97.854438][ T4738] ? do_sys_open+0xe0/0xe0 [ 97.858922][ T4738] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 97.865245][ T4738] ? lock_chain_count+0x20/0x20 [ 97.870123][ T4738] __x64_sys_openat+0x135/0x160 [ 97.875099][ T4738] do_syscall_64+0x4c/0xa0 [ 97.879669][ T4738] ? clear_bhb_loop+0x60/0xb0 [ 97.884366][ T4738] ? clear_bhb_loop+0x60/0xb0 [ 97.889054][ T4738] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 97.894994][ T4738] RIP: 0033:0x7f82e179e1d9 [ 97.899519][ T4738] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 97.920104][ T4738] RSP: 002b:00007f82e274d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 97.928865][ T4738] RAX: ffffffffffffffda RBX: 00007f82e1a25fa0 RCX: 00007f82e179e1d9 [ 97.937095][ T4738] RDX: 0000000000080200 RSI: 0000200000000300 RDI: ffffffffffffff9c [ 97.945435][ T4738] RBP: 00007f82e1835888 R08: 0000000000000000 R09: 0000000000000000 [ 97.953841][ T4738] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 97.962438][ T4738] R13: 00007f82e1a26038 R14: 00007f82e1a25fa0 R15: 00007ffc4a888d98 [ 97.970623][ T4738] [ 99.508566][ T26] audit: type=1800 audit(1791496087.524:5): pid=4757 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.114" name="nexus" dev="configfs" ino=35731 res=0 errno=0 [ 99.716675][ T4764] jffs2: notice: (4764) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 99.773852][ T4763] 8021q: adding VLAN 0 to HW filter on device bond0 [ 99.787823][ T4763] 8021q: adding VLAN 0 to HW filter on device team0 [ 99.807514][ T4763] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 99.912080][ T33] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 100.025265][ T4766] capability: warning: `syz.1.116' uses 32-bit capabilities (legacy support in use) [ 100.062510][ T4766] loop1: detected capacity change from 0 to 256 [ 100.112958][ T33] usb 4-1: Using ep0 maxpacket: 32 [ 100.120031][ T33] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 100.193384][ T33] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 100.239416][ T33] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 100.280937][ T33] usb 4-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 100.311665][ T4787] nvmet: adding nsid 1 to subsystem testsubsys [ 100.329628][ T33] usb 4-1: Product: syz [ 100.348653][ T4766] FAT-fs (loop1): IO charset is not found [ 100.356400][ T33] usb 4-1: Manufacturer: syz [ 100.403041][ T33] hub 4-1:4.0: USB hub found [ 100.603685][ T33] hub 4-1:4.0: config failed, can't read hub descriptor (err -22) [ 100.702807][ T33] usb 4-1: USB disconnect, device number 3 [ 100.992002][ T22] usb 2-1: new low-speed USB device number 2 using dummy_hcd [ 101.204739][ T22] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 101.216217][ T33] usb 4-1: new full-speed USB device number 4 using dummy_hcd [ 101.237957][ T22] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 101.278318][ T22] usb 2-1: New USB device found, idVendor=0c70, idProduct=f0b6, bcdDevice= 0.00 [ 101.340042][ T22] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 101.372131][ T22] usb 2-1: config 0 descriptor?? [ 101.421051][ T33] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 101.511329][ T33] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 101.584275][ T33] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 101.621953][ T33] usb 4-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 101.630416][ T33] usb 4-1: Product: syz [ 101.668080][ T33] usb 4-1: Manufacturer: syz [ 101.721348][ T33] hub 4-1:4.0: USB hub found [ 101.864112][ T22] hid-generic 0003:0C70:F0B6.0001: hidraw0: USB HID v0.00 Device [HID 0c70:f0b6] on usb-dummy_hcd.1-1/input0 [ 101.915038][ T33] hub 4-1:4.0: 1 port detected [ 101.955739][ T4808] netlink: 'syz.0.129': attribute type 1 has an invalid length. [ 102.033757][ T4808] bond1: (slave veth0_to_bond): making interface the new active one [ 102.083789][ T4808] bond1: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 102.153362][ T4811] device macvlan2 entered promiscuous mode [ 102.180450][ T4811] device bond1 entered promiscuous mode [ 102.198485][ T4811] device veth0_to_bond entered promiscuous mode [ 102.210696][ T4811] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 102.231620][ T4811] bond1: (slave macvlan2): the slave hw address is in use by the bond; giving it the hw address of veth0_to_bond [ 102.251700][ T4811] device bond1 left promiscuous mode [ 102.257411][ T4811] device veth0_to_bond left promiscuous mode [ 102.292326][ T22] usb 2-1: USB disconnect, device number 2 [ 102.521351][ T4816] pit: kvm: requested 186057 ns i8254 timer period limited to 200000 ns [ 102.531599][ T4816] pit: kvm: requested 113981 ns i8254 timer period limited to 200000 ns [ 102.571833][ T4816] pit: kvm: requested 187733 ns i8254 timer period limited to 200000 ns [ 102.588197][ T4816] pit: kvm: requested 43580 ns i8254 timer period limited to 200000 ns [ 102.604819][ T4816] pit: kvm: requested 129066 ns i8254 timer period limited to 200000 ns [ 102.620797][ T4826] netlink: 4 bytes leftover after parsing attributes in process `syz.2.132'. [ 102.767488][ T22] hub 4-1:4.0: activate --> -90 [ 102.927062][ T4834] device wlan0 entered promiscuous mode [ 102.991413][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805693e800: rx timeout, send abort [ 103.001541][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88805693e800: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 103.189477][ T33] hub 4-1:4.0: hub_ext_port_status failed (err = 0) [ 103.246823][ T4843] loop1: detected capacity change from 0 to 512 [ 103.371159][ T4843] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 103.390686][ T4843] ext4 filesystem being mounted at /34/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 103.460684][ T4848] netlink: 'syz.0.140': attribute type 10 has an invalid length. [ 103.477942][ T4848] bridge0: port 2(bridge_slave_1) entered disabled state [ 103.485446][ T4848] bridge0: port 1(bridge_slave_0) entered disabled state [ 103.521593][ T4848] bridge0: port 2(bridge_slave_1) entered blocking state [ 103.528817][ T4848] bridge0: port 2(bridge_slave_1) entered forwarding state [ 103.537848][ T4848] bridge0: port 1(bridge_slave_0) entered blocking state [ 103.545670][ T4848] bridge0: port 1(bridge_slave_0) entered forwarding state [ 103.569008][ T4848] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 103.652408][ T4272] EXT4-fs (loop1): unmounting filesystem. [ 103.791947][ T33] usb 4-1-port1: cannot reset (err = -71) [ 103.797864][ T33] usb 4-1-port1: Cannot enable. Maybe the USB cable is bad? [ 103.799200][ T4316] usb 4-1: USB disconnect, device number 4 [ 103.823132][ T33] usb 4-1-port1: attempt power cycle [ 104.342218][ T127] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 104.549601][ T127] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 104.560570][ T127] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 104.576549][ T127] usb 1-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 104.589831][ T127] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 104.614055][ T127] usb 1-1: config 0 descriptor?? [ 104.948389][ T4882] loop3: detected capacity change from 0 to 1024 [ 104.983205][ T4880] block nbd1: shutting down sockets [ 105.039348][ T127] playstation 0003:054C:0DF2.0002: unknown main item tag 0x0 [ 105.053978][ T127] playstation 0003:054C:0DF2.0002: unknown main item tag 0x0 [ 105.070095][ T127] playstation 0003:054C:0DF2.0002: unknown main item tag 0x0 [ 105.083225][ T4882] syz.3.154: attempt to access beyond end of device [ 105.083225][ T4882] loop3: rw=0, sector=5778, nr_sectors = 2 limit=1024 [ 105.092533][ T127] playstation 0003:054C:0DF2.0002: unknown main item tag 0x0 [ 105.117225][ T127] playstation 0003:054C:0DF2.0002: unknown main item tag 0x0 [ 105.134246][ T127] playstation 0003:054C:0DF2.0002: hidraw0: USB HID v1.01 Device [HID 054c:0df2] on usb-dummy_hcd.0-1/input0 [ 105.330613][ T4886] kvm [4885]: vcpu2, guest rIP: 0x9135 Unhandled WRMSR(0xc1) = 0xfffffc00 [ 105.340119][ T4886] kvm [4885]: vcpu2, guest rIP: 0x9135 Unhandled WRMSR(0xc2) = 0xfffffc00 [ 105.361156][ T4886] kvm [4885]: vcpu2, guest rIP: 0x9135 Unhandled WRMSR(0x11e) = 0xfffffc00 [ 105.379953][ T4886] kvm [4885]: vcpu2, guest rIP: 0x9135 Unhandled WRMSR(0x186) = 0xfffffc00 [ 105.389309][ T4886] kvm [4885]: vcpu2, guest rIP: 0x9135 Unhandled WRMSR(0x187) = 0xfffffc00 [ 105.453441][ T127] playstation 0003:054C:0DF2.0002: Failed to retrieve feature with reportID 32: -32 [ 105.482058][ T127] playstation 0003:054C:0DF2.0002: Failed to retrieve DualSense firmware info: -32 [ 105.491444][ T127] playstation 0003:054C:0DF2.0002: Failed to get firmware info from DualSense [ 105.508740][ T127] playstation 0003:054C:0DF2.0002: Failed to create dualsense. [ 105.519668][ T127] playstation: probe of 0003:054C:0DF2.0002 failed with error -32 [ 105.576692][ T127] usb 1-1: USB disconnect, device number 2 [ 105.738261][ T4898] fido_id[4898]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 106.060595][ T4913] IPv6: NLM_F_CREATE should be specified when creating new route [ 106.118809][ T4913] netlink: 52 bytes leftover after parsing attributes in process `syz.1.160'. [ 106.187977][ T4917] Illegal XDP return value 2115037116 on prog (id 13) dev syz_tun, expect packet loss! [ 106.946198][ T4936] kvm: emulating exchange as write [ 107.717052][ T4951] loop1: detected capacity change from 0 to 256 [ 107.821988][ T4951] exFAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 107.917044][ T4951] exFAT-fs (loop1): Medium has reported failures. Some data may be lost. [ 108.023259][ T4951] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 108.102167][ T4951] exFAT-fs (loop1): failed to load alloc-bitmap [ 108.108535][ T4951] exFAT-fs (loop1): failed to recognize exfat type [ 108.534356][ T4971] FAULT_INJECTION: forcing a failure. [ 108.534356][ T4971] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 108.548271][ T4971] CPU: 1 PID: 4971 Comm: syz.1.181 Not tainted syzkaller #0 [ 108.555590][ T4971] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 108.565766][ T4971] Call Trace: [ 108.569156][ T4971] [ 108.572103][ T4971] dump_stack_lvl+0x188/0x24e [ 108.576796][ T4971] ? show_regs_print_info+0x12/0x12 [ 108.582037][ T4971] ? load_image+0x410/0x410 [ 108.586721][ T4971] should_fail_ex+0x390/0x4c0 [ 108.591421][ T4971] strncpy_from_user+0x32/0x340 [ 108.596301][ T4971] strncpy_from_user_nofault+0x6d/0x140 [ 108.601941][ T4971] bpf_probe_read_user_str+0x26/0x70 [ 108.607504][ T4971] bpf_prog_f02f1dfcd5d97258+0x45/0x82 [ 108.613335][ T4971] ? __lock_acquire+0x7ea0/0x7ea0 [ 108.618386][ T4971] ? migrate_disable+0xcf/0x180 [ 108.623243][ T4971] bpf_flow_dissect+0x130/0x3f0 [ 108.628185][ T4971] ? bpf_test_timer_continue+0x142/0x380 [ 108.633831][ T4971] bpf_prog_test_run_flow_dissector+0x431/0x640 [ 108.640090][ T4971] ? xdp_convert_buff_to_md+0x200/0x200 [ 108.645652][ T4971] ? __fget_files+0x28/0x460 [ 108.650255][ T4971] ? xdp_convert_buff_to_md+0x200/0x200 [ 108.655812][ T4971] bpf_prog_test_run+0x31c/0x390 [ 108.660787][ T4971] __sys_bpf+0x62b/0x780 [ 108.665055][ T4971] ? bpf_link_show_fdinfo+0x380/0x380 [ 108.670531][ T4971] ? lock_chain_count+0x20/0x20 [ 108.675424][ T4971] __x64_sys_bpf+0x78/0x90 [ 108.679861][ T4971] do_syscall_64+0x4c/0xa0 [ 108.684285][ T4971] ? clear_bhb_loop+0x60/0xb0 [ 108.688971][ T4971] ? clear_bhb_loop+0x60/0xb0 [ 108.693647][ T4971] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 108.699537][ T4971] RIP: 0033:0x7f393ed9e1d9 [ 108.703969][ T4971] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 108.723609][ T4971] RSP: 002b:00007f393fbb2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 108.732046][ T4971] RAX: ffffffffffffffda RBX: 00007f393f026090 RCX: 00007f393ed9e1d9 [ 108.740278][ T4971] RDX: 000000000000004c RSI: 0000200000000640 RDI: 000000000000000a [ 108.748337][ T4971] RBP: 00007f393ee35888 R08: 0000000000000000 R09: 0000000000000000 [ 108.756305][ T4971] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 108.764272][ T4971] R13: 00007f393f026128 R14: 00007f393f026090 R15: 00007fff65814c78 [ 108.772359][ T4971] [ 108.791577][ T4973] loop0: detected capacity change from 0 to 1024 [ 108.822200][ T4973] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 108.918581][ T4973] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 109.356531][ T4274] EXT4-fs (loop0): unmounting filesystem. [ 109.773726][ T4999] loop3: detected capacity change from 0 to 128 [ 109.793257][ T4318] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 109.851246][ T4999] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 109.891068][ T4999] ext4 filesystem being mounted at /32/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 109.946378][ T5003] FAULT_INJECTION: forcing a failure. [ 109.946378][ T5003] name failslab, interval 1, probability 0, space 0, times 0 [ 109.971427][ T5003] CPU: 1 PID: 5003 Comm: syz.1.190 Not tainted syzkaller #0 [ 109.979053][ T5003] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 109.989135][ T5003] Call Trace: [ 109.992436][ T5003] [ 109.995538][ T5003] dump_stack_lvl+0x188/0x24e [ 110.000739][ T5003] ? show_regs_print_info+0x12/0x12 [ 110.006169][ T5003] ? load_image+0x410/0x410 [ 110.010704][ T5003] ? __might_sleep+0xd0/0xd0 [ 110.012145][ T4318] usb 1-1: Using ep0 maxpacket: 32 [ 110.015396][ T5003] ? __lock_acquire+0x7ea0/0x7ea0 [ 110.015458][ T5003] should_fail_ex+0x390/0x4c0 [ 110.026968][ T4318] usb 1-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 110.030261][ T5003] should_failslab+0x5/0x20 [ 110.030288][ T5003] slab_pre_alloc_hook+0x59/0x300 [ 110.043876][ T4318] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 110.048849][ T5003] kmem_cache_alloc+0x56/0x2f0 [ 110.061638][ T5003] ? ep_insert+0x249/0x1980 [ 110.064316][ T4318] usb 1-1: Product: syz [ 110.066161][ T5003] ep_insert+0x249/0x1980 [ 110.072234][ T4318] usb 1-1: Manufacturer: syz [ 110.074648][ T5003] ? __mutex_lock+0x1ab/0xae0 [ 110.074686][ T5003] ? ep_loop_check+0x1b0/0x1b0 [ 110.074707][ T5003] ? mutex_lock_nested+0x10/0x10 [ 110.074728][ T5003] ? __lock_acquire+0x7ea0/0x7ea0 [ 110.074767][ T5003] do_epoll_ctl+0x8b2/0xf40 [ 110.074804][ T5003] __x64_sys_epoll_ctl+0x162/0x1b0 [ 110.074830][ T5003] ? ep_modify+0xa80/0xa80 [ 110.074857][ T5003] ? lockdep_hardirqs_on+0x94/0x140 [ 110.074886][ T5003] do_syscall_64+0x4c/0xa0 [ 110.074905][ T5003] ? clear_bhb_loop+0x60/0xb0 [ 110.074925][ T5003] ? clear_bhb_loop+0x60/0xb0 [ 110.074947][ T5003] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 110.074966][ T5003] RIP: 0033:0x7f393ed9e1d9 [ 110.074984][ T5003] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 110.074999][ T5003] RSP: 002b:00007f393fbd3028 EFLAGS: 00000246 ORIG_RAX: 00000000000000e9 [ 110.075021][ T5003] RAX: ffffffffffffffda RBX: 00007f393f025fa0 RCX: 00007f393ed9e1d9 [ 110.075032][ T5003] RDX: 0000000000000003 RSI: 0000000000000001 RDI: 0000000000000004 [ 110.075041][ T5003] RBP: 00007f393ee35888 R08: 0000000000000000 R09: 0000000000000000 [ 110.075051][ T5003] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 110.075061][ T5003] R13: 00007f393f026038 R14: 00007f393f025fa0 R15: 00007fff65814c78 [ 110.075089][ T5003] [ 110.359240][ T4282] EXT4-fs (loop3): unmounting filesystem. [ 110.382406][ T4318] usb 1-1: SerialNumber: syz [ 110.389352][ T4318] usb 1-1: config 0 descriptor?? [ 110.401981][ T4318] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 110.525331][ T5006] xt_hashlimit: size too large, truncated to 1048576 [ 111.122047][ T4316] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 111.322010][ T4316] usb 3-1: Using ep0 maxpacket: 32 [ 111.329272][ T4316] usb 3-1: config 0 interface 0 altsetting 64 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 111.362100][ T4316] usb 3-1: config 0 interface 0 has no altsetting 0 [ 111.379248][ T4316] usb 3-1: New USB device found, idVendor=056a, idProduct=0336, bcdDevice= 0.00 [ 111.392000][ T4316] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 111.424757][ T4316] usb 3-1: config 0 descriptor?? [ 111.639768][ T5011] loop2: detected capacity change from 0 to 256 [ 111.660501][ T5011] FAT-fs (loop2): Unrecognized mount option "shortºÍ?=winnt" or missing value [ 111.921989][ T4316] wacom 0003:056A:0336.0003: hidraw0: USB HID vff.fc Device [HID 056a:0336] on usb-dummy_hcd.2-1/input0 [ 112.173279][ T4316] usb 3-1: USB disconnect, device number 2 [ 112.419736][ T4318] gspca_ov534_9: reg_w failed -71 [ 112.608075][ T5027] nftables ruleset with unbound set [ 112.751983][ T4318] gspca_ov534_9: Unknown sensor 0000 [ 112.752063][ T4318] ov534_9: probe of 1-1:0.0 failed with error -22 [ 113.490931][ T4318] usb 1-1: USB disconnect, device number 3 [ 113.720912][ T5037] loop2: detected capacity change from 0 to 128 [ 113.765323][ T5042] loop3: detected capacity change from 0 to 256 [ 113.808973][ T5037] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 113.890454][ T5037] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 114.310196][ T5053] TC_ACT_REPEAT abuse ? [ 114.534999][ T5067] loop3: detected capacity change from 0 to 2048 [ 115.549106][ T5105] netlink: 12 bytes leftover after parsing attributes in process `syz.1.216'. [ 115.742290][ T5105] bond2: (slave veth3): Enslaving as an active interface with an up link [ 116.313039][ T4283] Bluetooth: hci3: command 0x0409 tx timeout [ 116.786618][ T5127] overlayfs: statfs failed on './file0' [ 117.124137][ T22] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 117.312046][ T22] usb 1-1: Using ep0 maxpacket: 16 [ 117.330375][ T22] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 117.391424][ T22] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 117.440404][ T22] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 117.455263][ T22] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 117.491622][ T22] usb 1-1: config 0 descriptor?? [ 117.812600][ T5151] loop1: detected capacity change from 0 to 512 [ 117.839377][ T5151] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 117.850589][ T5151] EXT4-fs (loop1): couldn't mount as ext2 due to feature incompatibilities [ 117.916386][ T22] microsoft 0003:045E:07DA.0004: ignoring exceeding usage max [ 117.935182][ T22] input: HID 045e:07da as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:045E:07DA.0004/input/input9 [ 117.953582][ T22] microsoft 0003:045E:07DA.0004: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0 [ 118.506711][ T5154] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 118.529811][ T5154] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 118.700009][ T127] usb 1-1: USB disconnect, device number 4 [ 119.060118][ T5167] IPv6: NLM_F_CREATE should be specified when creating new route [ 119.070838][ T5167] netlink: 52 bytes leftover after parsing attributes in process `syz.3.233'. [ 119.441576][ T5175] overlayfs: statfs failed on './file0' [ 119.451750][ T5176] loop2: detected capacity change from 0 to 2048 [ 119.640806][ T4283] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 119.651070][ T4283] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 119.661080][ T4283] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 119.686866][ T5178] wusb3801 0-0004: supply vbus not found, using dummy regulator [ 119.703468][ T5178] i2c i2c-0: new_device: Instantiated device wusb3801 at 0x04 [ 119.739738][ T4283] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 119.748132][ T4276] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 119.756367][ T4276] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 119.881901][ T0] NOHZ tick-stop error: local softirq work is pending, handler #0a!!! [ 119.901890][ T0] NOHZ tick-stop error: local softirq work is pending, handler #8a!!! [ 119.911889][ T0] NOHZ tick-stop error: local softirq work is pending, handler #18a!!! [ 121.004344][ T5188] FAULT_INJECTION: forcing a failure. [ 121.004344][ T5188] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 121.018414][ T5188] CPU: 1 PID: 5188 Comm: syz.3.240 Not tainted syzkaller #0 [ 121.025738][ T5188] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 121.035936][ T5188] Call Trace: [ 121.039247][ T5188] [ 121.042207][ T5188] dump_stack_lvl+0x188/0x24e [ 121.047009][ T5188] ? show_regs_print_info+0x12/0x12 [ 121.052230][ T5188] ? load_image+0x410/0x410 [ 121.056764][ T5188] should_fail_ex+0x390/0x4c0 [ 121.061490][ T5188] strncpy_from_user+0x32/0x340 [ 121.066579][ T5188] strncpy_from_user_nofault+0x6d/0x140 [ 121.072243][ T5188] bpf_probe_read_user_str+0x26/0x70 [ 121.077655][ T5188] bpf_prog_f02f1dfcd5d97258+0x45/0x82 [ 121.083140][ T5188] ? read_lock_is_recursive+0x10/0x10 [ 121.088535][ T5188] ? migrate_disable+0xcf/0x180 [ 121.093394][ T5188] bpf_flow_dissect+0x130/0x3f0 [ 121.098245][ T5188] ? bpf_test_timer_continue+0x142/0x380 [ 121.103884][ T5188] bpf_prog_test_run_flow_dissector+0x431/0x640 [ 121.110138][ T5188] ? xdp_convert_buff_to_md+0x200/0x200 [ 121.115684][ T5188] ? __fget_files+0x28/0x460 [ 121.120282][ T5188] ? xdp_convert_buff_to_md+0x200/0x200 [ 121.125829][ T5188] bpf_prog_test_run+0x31c/0x390 [ 121.130796][ T5188] __sys_bpf+0x62b/0x780 [ 121.135054][ T5188] ? bpf_link_show_fdinfo+0x380/0x380 [ 121.140448][ T5188] ? lock_chain_count+0x20/0x20 [ 121.145317][ T5188] __x64_sys_bpf+0x78/0x90 [ 121.149739][ T5188] do_syscall_64+0x4c/0xa0 [ 121.154153][ T5188] ? clear_bhb_loop+0x60/0xb0 [ 121.158827][ T5188] ? clear_bhb_loop+0x60/0xb0 [ 121.164021][ T5188] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 121.169925][ T5188] RIP: 0033:0x7f147779e1d9 [ 121.174338][ T5188] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 121.193952][ T5188] RSP: 002b:00007f14786d4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 121.202381][ T5188] RAX: ffffffffffffffda RBX: 00007f1477a26090 RCX: 00007f147779e1d9 [ 121.210357][ T5188] RDX: 000000000000004c RSI: 0000200000000640 RDI: 000000000000000a [ 121.218419][ T5188] RBP: 00007f1477835888 R08: 0000000000000000 R09: 0000000000000000 [ 121.226383][ T5188] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 121.234351][ T5188] R13: 00007f1477a26128 R14: 00007f1477a26090 R15: 00007ffe202437a8 [ 121.242356][ T5188] [ 121.245436][ C1] vkms_vblank_simulate: vblank timer overrun [ 121.561935][ T33] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 121.589098][ T5179] chnl_net:caif_netlink_parms(): no params data found [ 121.750142][ T5179] bridge0: port 1(bridge_slave_0) entered blocking state [ 121.762082][ T33] usb 3-1: Using ep0 maxpacket: 16 [ 121.770802][ T33] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 121.791999][ T4283] Bluetooth: hci5: command 0x0409 tx timeout [ 121.823203][ T33] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 121.836470][ T33] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 121.842046][ T5179] bridge0: port 1(bridge_slave_0) entered disabled state [ 121.846485][ T33] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 121.882705][ T33] usb 3-1: config 0 descriptor?? [ 121.913111][ T5179] device bridge_slave_0 entered promiscuous mode [ 121.969345][ T5179] bridge0: port 2(bridge_slave_1) entered blocking state [ 121.991254][ T5179] bridge0: port 2(bridge_slave_1) entered disabled state [ 122.008777][ T5179] device bridge_slave_1 entered promiscuous mode [ 122.091797][ T5179] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 122.126654][ T5179] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 122.216442][ T5179] team0: Port device team_slave_0 added [ 122.234310][ T5179] team0: Port device team_slave_1 added [ 122.299852][ T33] microsoft 0003:045E:07DA.0005: ignoring exceeding usage max [ 122.309402][ T5179] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 122.326932][ T5179] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 122.353354][ T127] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 122.366887][ T33] input: HID 045e:07da as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:045E:07DA.0005/input/input10 [ 122.422195][ T5179] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 122.427043][ T33] microsoft 0003:045E:07DA.0005: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 122.445530][ T5179] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 122.457589][ T5210] xt_hashlimit: size too large, truncated to 1048576 [ 122.492951][ T5179] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 122.571992][ T127] usb 4-1: Using ep0 maxpacket: 16 [ 122.596678][ T127] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 122.684684][ T5214] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 122.710986][ T5214] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 122.857876][ T127] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 123.042759][ T5179] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 123.172016][ T127] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 123.205044][ T127] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 123.208545][ T4349] usb 3-1: USB disconnect, device number 3 [ 123.252846][ T5212] fido_id[5212]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/3-1/report_descriptor': No such file or directory [ 123.278945][ T127] usb 4-1: config 0 descriptor?? [ 123.386361][ T5179] device hsr_slave_0 entered promiscuous mode [ 123.419535][ T5179] device hsr_slave_1 entered promiscuous mode [ 123.446368][ T5179] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 123.474749][ T5179] Cannot create hsr debugfs directory [ 123.719628][ T127] microsoft 0003:045E:07DA.0006: ignoring exceeding usage max [ 123.783336][ T127] input: HID 045e:07da as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:045E:07DA.0006/input/input11 [ 123.847729][ T5218] loop1: detected capacity change from 0 to 256 [ 123.873605][ T4283] Bluetooth: hci5: command 0x041b tx timeout [ 123.892486][ T127] microsoft 0003:045E:07DA.0006: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 123.948768][ T5220] netlink: 12 bytes leftover after parsing attributes in process `syz.2.249'. [ 124.392906][ T5225] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 124.428069][ T5223] bond1: (slave veth3): Enslaving as an active interface with an up link [ 124.443255][ T5225] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 124.584630][ T5179] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 124.632262][ T5179] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 124.730775][ T5179] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 124.754351][ T5179] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 124.962278][ T5229] netlink: 'syz.2.251': attribute type 1 has an invalid length. [ 125.001589][ T4316] usb 4-1: USB disconnect, device number 9 [ 125.019643][ T5233] bond2: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 125.121166][ T5229] device macvlan2 entered promiscuous mode [ 125.162827][ T5229] device bond2 entered promiscuous mode [ 125.168942][ T5229] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 125.198663][ T5229] device bond2 left promiscuous mode [ 125.301453][ T5179] 8021q: adding VLAN 0 to HW filter on device bond0 [ 125.380699][ T4523] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 125.398482][ T4523] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 125.429572][ T5179] 8021q: adding VLAN 0 to HW filter on device team0 [ 125.457786][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 125.479324][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 125.510962][ T47] bridge0: port 1(bridge_slave_0) entered blocking state [ 125.518879][ T47] bridge0: port 1(bridge_slave_0) entered forwarding state [ 125.579842][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 125.604985][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 125.639574][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 125.663871][ T47] bridge0: port 2(bridge_slave_1) entered blocking state [ 125.671091][ T47] bridge0: port 2(bridge_slave_1) entered forwarding state [ 125.719981][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 125.743050][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 125.797319][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 125.818621][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 125.848202][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 125.867540][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 125.882992][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 125.914548][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 125.933331][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 125.951930][ T4283] Bluetooth: hci5: command 0x040f tx timeout [ 125.958804][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 125.997302][ T5179] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 126.012597][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 126.548848][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 126.565704][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 126.584442][ T5179] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 126.651946][ T4316] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 126.852080][ T4316] usb 4-1: Using ep0 maxpacket: 16 [ 126.869722][ T4316] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 126.893136][ T4316] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 126.926545][ T4316] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 126.957564][ T4316] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 126.977438][ T5263] loop2: detected capacity change from 0 to 2048 [ 126.980009][ T4316] usb 4-1: config 0 descriptor?? [ 127.084880][ T5263] loop2: p4 < > [ 127.148408][ T5269] loop0: detected capacity change from 0 to 256 [ 127.210927][ T3640] loop2: p4 < > [ 127.801123][ T5226] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 127.826093][ T5226] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 127.946518][ T5215] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 127.973240][ T5215] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 128.019546][ T5179] device veth0_vlan entered promiscuous mode [ 128.032561][ T4283] Bluetooth: hci5: command 0x0419 tx timeout [ 128.039701][ T5215] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 128.060904][ T5215] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 128.098100][ T5179] device veth1_vlan entered promiscuous mode [ 128.221010][ T5226] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 128.231493][ T5226] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 128.274246][ T5226] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 128.314130][ T5226] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 128.372850][ T5179] device veth0_macvtap entered promiscuous mode [ 128.401736][ T5282] bridge0: port 1(bridge_slave_0) entered disabled state [ 128.443656][ T5179] device veth1_macvtap entered promiscuous mode [ 128.753409][ T5226] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 128.872803][ T5226] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 128.930349][ T5279] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 128.974857][ T5279] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 129.087134][ T5179] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 129.111046][ T5179] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 129.137268][ T5179] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 129.148476][ T5179] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 129.159114][ T5179] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 129.170245][ T5179] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 129.188229][ T5179] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 129.200711][ T5179] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 129.219275][ T5179] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 129.230529][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 129.240679][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 129.256118][ T5179] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 129.292556][ T4316] usbhid 4-1:0.0: can't add hid device: -71 [ 129.298942][ T4316] usbhid: probe of 4-1:0.0 failed with error -71 [ 129.314655][ T5179] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 129.354275][ T4316] usb 4-1: USB disconnect, device number 10 [ 129.360937][ T5179] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 129.384305][ T5179] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 129.426008][ T5179] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 129.451986][ T5179] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 129.462181][ T5179] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 129.473387][ T5179] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 129.506331][ T5179] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 129.532389][ T5226] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 129.545264][ T5226] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 129.563535][ T5179] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.591154][ T5179] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.604989][ T5179] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.621954][ T5179] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.797508][ T5226] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 129.814490][ T5226] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 129.887384][ T5226] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 129.920573][ T5226] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 129.941578][ T5226] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 129.967232][ T4523] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 130.311643][ T5306] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 130.356447][ T5308] loop5: detected capacity change from 0 to 512 [ 130.397649][ T5308] FAT-fs (loop5): Unrecognized mount option "ÿÿÿÿÿÿÿÿ01777777777777777777777" or missing value [ 130.567072][ T5308] loop5: detected capacity change from 0 to 4096 [ 130.606537][ T5308] EXT4-fs: Ignoring removed orlov option [ 130.628044][ T5308] ext4: Unknown parameter 'func' [ 131.393383][ T5322] CIFS: Attempting to mount \\127.0.0.1\share [ 131.472265][ T4276] Bluetooth: hci1: command 0x1003 tx timeout [ 131.472378][ T4283] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 131.491263][ T5323] CIFS: VFS: \\127.0.0.1 SMB response too short (0 bytes) [ 131.858976][ T5322] CIFS: VFS: cifs_mount failed w/return code = -112 [ 131.978352][ T4318] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 133.031557][ T5356] loop5: detected capacity change from 0 to 512 [ 133.039151][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.046298][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.531856][ C0] sched: RT throttling activated [ 133.538662][ T4283] Bluetooth: hci5: command 0x2016 tx timeout [ 133.573802][ T5356] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 133.597520][ T5368] tipc: Enabling of bearer rejected, failed to enable media [ 133.631348][ T5356] ext4 filesystem being mounted at /4/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 134.401918][ T4318] usb 3-1: Using ep0 maxpacket: 16 [ 134.411826][ T4318] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 134.430857][ T4318] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 134.454138][ T4318] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 134.467217][ T4318] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 134.487059][ T5179] EXT4-fs (loop5): unmounting filesystem. [ 134.500441][ T4318] usb 3-1: config 0 descriptor?? [ 134.760715][ T4398] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 134.780173][ T4318] usbhid 3-1:0.0: can't add hid device: -71 [ 134.787738][ T4318] usbhid: probe of 3-1:0.0 failed with error -71 [ 134.816087][ T4318] usb 3-1: USB disconnect, device number 4 [ 135.551969][ T49] Bluetooth: hci5: command 0x0406 tx timeout [ 137.759695][ T5451] loop5: detected capacity change from 0 to 8 [ 137.862049][ T4318] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 138.082012][ T4318] usb 2-1: Using ep0 maxpacket: 16 [ 138.095242][ T4318] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 138.124362][ T4318] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 138.146984][ T4318] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 138.161685][ T4318] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 138.203607][ T4318] usb 2-1: config 0 descriptor?? [ 138.622744][ T4318] microsoft 0003:045E:07DA.0007: ignoring exceeding usage max [ 138.679089][ T4318] input: HID 045e:07da as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:045E:07DA.0007/input/input12 [ 138.735745][ T4318] microsoft 0003:045E:07DA.0007: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 138.927541][ T5472] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 138.948298][ T5472] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 139.392219][ T5473] usb 2-1: USB disconnect, device number 3 [ 139.544069][ T5471] fido_id[5471]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 140.508701][ T4318] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 140.689179][ T5489] overlayfs: failed to clone upperpath [ 140.712126][ T4318] usb 6-1: Using ep0 maxpacket: 8 [ 140.720308][ T4318] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 140.751341][ T4318] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 140.849593][ T4318] usb 6-1: New USB device found, idVendor=0e41, idProduct=534d, bcdDevice= 0.40 [ 140.971036][ T4318] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 141.073134][ T4318] usb 6-1: Product: syz [ 141.123673][ T4318] usb 6-1: Manufacturer: syz [ 141.184911][ T4318] usb 6-1: SerialNumber: syz [ 141.592915][ T5494] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 141.718146][ T4318] usb 6-1: unit 0 not found! [ 141.807805][ T5504] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 141.818184][ T4318] usb 6-1: USB disconnect, device number 2 [ 141.835852][ T5504] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 141.889287][ T5504] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 141.899008][ T5503] null_blk: disk nullb1 created [ 141.909426][ T5504] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 142.281002][ T4348] udevd[4348]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 142.640997][ T5529] binder: 5526:5529 unknown command 0 [ 142.665180][ T5529] binder: 5526:5529 ioctl c0306201 200000000480 returned -22 [ 142.939432][ T5507] bridge0: port 2(bridge_slave_1) entered disabled state [ 142.946810][ T5507] bridge0: port 1(bridge_slave_0) entered disabled state [ 143.384648][ T5507] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 143.447077][ T5507] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 143.808897][ T5507] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 143.818055][ T5507] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 143.827619][ T5507] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 143.836924][ T5507] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 143.933326][ T5509] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 143.976198][ T5547] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 143.984055][ T5547] IPv6: NLM_F_CREATE should be set when creating new route [ 144.007874][ T5551] netlink: 12 bytes leftover after parsing attributes in process `syz.5.330'. [ 144.931143][ T5582] loop5: detected capacity change from 0 to 512 [ 144.999584][ T5582] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 145.615185][ T5590] netlink: 4 bytes leftover after parsing attributes in process `syz.5.343'. [ 146.649382][ T5596] netlink: 'syz.3.346': attribute type 1 has an invalid length. [ 146.670059][ T5599] loop2: detected capacity change from 0 to 128 [ 146.699674][ T5596] netlink: 28 bytes leftover after parsing attributes in process `syz.3.346'. [ 146.709769][ T5596] device bond1 entered promiscuous mode [ 146.716074][ T5596] 8021q: adding VLAN 0 to HW filter on device bond1 [ 146.730257][ T5596] device bridge1 entered promiscuous mode [ 146.743938][ T5596] bond1: (slave bridge1): making interface the new active one [ 146.752584][ T5596] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 146.772217][ T5215] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 147.072163][ T5473] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 147.272011][ T5473] usb 6-1: Using ep0 maxpacket: 16 [ 147.278951][ T5473] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 147.300725][ T5473] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 147.321919][ T5473] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 147.341313][ T5473] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 147.369189][ T5473] usb 6-1: config 0 descriptor?? [ 147.648002][ T5615] netlink: 'syz.1.351': attribute type 1 has an invalid length. [ 147.803658][ T5473] microsoft 0003:045E:07DA.0008: ignoring exceeding usage max [ 147.855157][ T5473] input: HID 045e:07da as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:045E:07DA.0008/input/input13 [ 147.898413][ T5473] microsoft 0003:045E:07DA.0008: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.5-1/input0 [ 148.433725][ T5627] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 148.476337][ T5627] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 148.613098][ T5473] usb 6-1: USB disconnect, device number 3 [ 148.649114][ T5625] fido_id[5625]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/6-1/report_descriptor': No such file or directory [ 149.745634][ T5633] loop0: detected capacity change from 0 to 1024 [ 149.778603][ T5633] EXT4-fs: Ignoring removed bh option [ 149.819097][ T5638] loop2: detected capacity change from 0 to 164 [ 149.898922][ T5633] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 150.024049][ T26] audit: type=1804 audit(1791496138.044:6): pid=5633 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.357" name="/newroot/77/file1/bus" dev="loop0" ino=18 res=1 errno=0 [ 150.189047][ T26] audit: type=1804 audit(1791496138.204:7): pid=5650 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.357" name="/newroot/77/file1/bus" dev="loop0" ino=18 res=1 errno=0 [ 150.211405][ T5647] device syzkaller0 entered promiscuous mode [ 150.249914][ T5647] tipc: Started in network mode [ 150.267710][ T5647] tipc: Node identity ce0aa10628d7, cluster identity 4711 [ 150.299971][ T5647] tipc: Enabled bearer , priority 0 [ 150.347738][ T5645] tipc: Resetting bearer [ 150.430175][ T5645] tipc: Disabling bearer [ 150.521389][ T5654] device syzkaller0 entered promiscuous mode [ 150.888825][ T4274] EXT4-fs (loop0): unmounting filesystem. [ 151.660843][ T5664] loop0: detected capacity change from 0 to 512 [ 151.736839][ T5664] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 151.779504][ T5664] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #16: comm syz.0.365: invalid indirect mapped block 4294967295 (level 0) [ 151.843805][ T5664] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #16: comm syz.0.365: invalid indirect mapped block 4294967295 (level 1) [ 151.879228][ T5664] EXT4-fs (loop0): 1 orphan inode deleted [ 151.891565][ T5664] EXT4-fs (loop0): 1 truncate cleaned up [ 151.909505][ T5664] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 151.939931][ T5673] FAULT_INJECTION: forcing a failure. [ 151.939931][ T5673] name failslab, interval 1, probability 0, space 0, times 0 [ 152.018838][ T5673] CPU: 0 PID: 5673 Comm: syz.2.367 Not tainted syzkaller #0 [ 152.026205][ T5673] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 152.036451][ T5673] Call Trace: [ 152.040235][ T5673] [ 152.043202][ T5673] dump_stack_lvl+0x188/0x24e [ 152.047929][ T5673] ? show_regs_print_info+0x12/0x12 [ 152.053415][ T5673] ? load_image+0x410/0x410 [ 152.057963][ T5673] ? __might_sleep+0xd0/0xd0 [ 152.062592][ T5673] ? __lock_acquire+0x7ea0/0x7ea0 [ 152.067742][ T5673] should_fail_ex+0x390/0x4c0 [ 152.072475][ T5673] should_failslab+0x5/0x20 [ 152.077010][ T5673] slab_pre_alloc_hook+0x59/0x300 [ 152.082161][ T5673] kmem_cache_alloc_lru+0x49/0x2e0 [ 152.087396][ T5673] ? shmem_alloc_inode+0x24/0x40 [ 152.092379][ T5673] shmem_alloc_inode+0x24/0x40 [ 152.097177][ T5673] ? shmem_match+0x160/0x160 [ 152.101800][ T5673] new_inode_pseudo+0x5f/0x1c0 [ 152.106597][ T5673] new_inode+0x25/0x1d0 [ 152.110793][ T5673] shmem_get_inode+0x327/0xbc0 [ 152.115602][ T5673] __shmem_file_setup+0x155/0x290 [ 152.120657][ T5673] shmem_zero_setup+0x89/0x120 [ 152.125454][ T5673] mmap_region+0x125c/0x1c50 [ 152.130086][ T5673] ? file_mmap_ok+0x170/0x170 [ 152.134802][ T5673] ? validate_mm+0x23f/0x2e0 [ 152.139482][ T5673] ? arch_get_unmapped_area+0x640/0x640 [ 152.145055][ T5673] ? cap_mmap_addr+0x153/0x2c0 [ 152.149861][ T5673] do_mmap+0x9ce/0x10d0 [ 152.154081][ T5673] ? mlock_future_check+0x100/0x100 [ 152.159310][ T5673] ? ima_file_mmap+0xf7/0x140 [ 152.164110][ T5673] ? ima_file_free+0x3e0/0x3e0 [ 152.168912][ T5673] ? do_sched_setscheduler+0xe0/0x370 [ 152.174320][ T5673] vm_mmap_pgoff+0x1c1/0x2d0 [ 152.178966][ T5673] ? account_locked_vm+0xe0/0xe0 [ 152.184382][ T5673] ? ksys_mmap_pgoff+0xef/0x720 [ 152.189272][ T5673] ? lockdep_hardirqs_on+0x94/0x140 [ 152.194607][ T5673] do_syscall_64+0x4c/0xa0 [ 152.199055][ T5673] ? clear_bhb_loop+0x60/0xb0 [ 152.203768][ T5673] ? clear_bhb_loop+0x60/0xb0 [ 152.208584][ T5673] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 152.214509][ T5673] RIP: 0033:0x7f678179e1d9 [ 152.218948][ T5673] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 152.238678][ T5673] RSP: 002b:00007f6782633028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 152.247124][ T5673] RAX: ffffffffffffffda RBX: 00007f6781a25fa0 RCX: 00007f678179e1d9 [ 152.255119][ T5673] RDX: b635773f06ebbeee RSI: 0000000000b36000 RDI: 0000200000000000 [ 152.263121][ T5673] RBP: 00007f6781835888 R08: ffffffffffffffff R09: 0000000000000000 [ 152.271212][ T5673] R10: 0000000000008031 R11: 0000000000000246 R12: 0000000000000000 [ 152.279214][ T5673] R13: 00007f6781a26038 R14: 00007f6781a25fa0 R15: 00007ffc7113d308 [ 152.287585][ T5673] [ 152.488725][ T5682] device bridge0 entered promiscuous mode [ 152.498403][ T5682] device vlan2 entered promiscuous mode [ 152.889583][ T4274] EXT4-fs (loop0): unmounting filesystem. [ 153.052096][ T33] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 153.245761][ T33] usb 3-1: Using ep0 maxpacket: 16 [ 153.255504][ T33] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 153.291308][ T33] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 153.336317][ T33] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 153.360905][ T33] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 153.391622][ T33] usb 3-1: config 0 descriptor?? [ 153.832421][ T33] microsoft 0003:045E:07DA.0009: ignoring exceeding usage max [ 153.868295][ T33] input: HID 045e:07da as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:045E:07DA.0009/input/input14 [ 153.903568][ T33] microsoft 0003:045E:07DA.0009: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 154.193812][ T5702] loop0: detected capacity change from 0 to 2048 [ 154.341916][ T5703] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 154.380633][ T5703] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 154.435179][ T5702] loop0: p4 < > [ 154.708389][ T33] usb 3-1: USB disconnect, device number 5 [ 154.807657][ T5702] EXT4-fs (loop0p4): unable to read superblock [ 155.659701][ T4320] usb 3-1: new full-speed USB device number 6 using dummy_hcd [ 155.863785][ T4320] usb 3-1: config 0 has an invalid interface number: 41 but max is 0 [ 155.878158][ T4320] usb 3-1: config 0 has no interface number 0 [ 155.889179][ T4320] usb 3-1: config 0 interface 41 has no altsetting 0 [ 155.916165][ T4320] usb 3-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 155.942100][ T4320] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 155.962309][ T4320] usb 3-1: Product: syz [ 155.966542][ T4320] usb 3-1: Manufacturer: syz [ 155.971162][ T4320] usb 3-1: SerialNumber: syz [ 155.988515][ T4320] usb 3-1: config 0 descriptor?? [ 156.885090][ T4320] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffe0 [ 157.219956][ T14] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 157.344389][ T5738] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 157.352289][ T5738] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 158.707888][ T4320] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): Failed to write RX_CTL mode to 0x0000:ffffffb9 [ 159.180997][ T4320] CoreChips: probe of 3-1:0.41 failed with error -71 [ 159.252918][ T4320] usb 3-1: USB disconnect, device number 6 [ 159.952016][ T4283] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 159.960002][ T49] Bluetooth: hci1: command 0x1003 tx timeout [ 160.816824][ T5744] sctp: failed to load transform for md5: -2 [ 161.379903][ T5766] loop5: detected capacity change from 0 to 2048 [ 161.608003][ T5766] loop5: p4 < > [ 162.431700][ T5777] EXT4-fs (loop5p4): unable to read superblock [ 162.709128][ T5794] device syzkaller0 entered promiscuous mode [ 162.756813][ T5794] tipc: Started in network mode [ 162.771922][ T5794] tipc: Node identity da01f9b4d1b8, cluster identity 4711 [ 162.806822][ T5794] tipc: Enabled bearer , priority 0 [ 163.033426][ T5793] tipc: Resetting bearer [ 164.169408][ T5809] loop1: detected capacity change from 0 to 8 [ 164.178543][ T5793] tipc: Disabling bearer [ 164.322682][ T5809] unable to read xattr id index table [ 164.358421][ T14] tipc: Node number set to 196737460 [ 165.080255][ T5816] loop1: detected capacity change from 0 to 1024 [ 165.174790][ T5816] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 165.203474][ T5816] ext4 filesystem being mounted at /96/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 165.216437][ T5816] EXT4-fs (loop1): unmounting filesystem. [ 165.342023][ T14] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 165.544972][ T14] usb 1-1: Using ep0 maxpacket: 16 [ 165.555322][ T14] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 166.223961][ T14] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 166.337037][ T14] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 166.346645][ T14] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 166.358103][ T14] usb 1-1: config 0 descriptor?? [ 166.900445][ T14] microsoft 0003:045E:07DA.000A: ignoring exceeding usage max [ 167.352980][ T5848] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 167.381979][ T14] input: HID 045e:07da as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:045E:07DA.000A/input/input15 [ 167.437558][ T5850] netlink: 24 bytes leftover after parsing attributes in process `syz.3.414'. [ 167.456693][ T5848] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 167.619675][ T14] microsoft 0003:045E:07DA.000A: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0 [ 167.964460][ T14] usb 1-1: USB disconnect, device number 5 [ 168.792746][ T5860] 9pnet_fd: p9_fd_create_tcp (5860): problem connecting socket to 127.0.0.1 [ 168.921423][ T5859] fido_id[5859]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 169.201975][ T14] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 169.412321][ T14] usb 2-1: Using ep0 maxpacket: 16 [ 169.433874][ T14] usb 2-1: config 1 has an invalid descriptor of length 174, skipping remainder of the config [ 169.503530][ T14] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 169.647594][ T14] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 169.765824][ T14] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 169.916134][ T14] usb 2-1: Product: syz [ 169.920650][ T14] usb 2-1: Manufacturer: syz [ 169.925901][ T14] usb 2-1: SerialNumber: syz [ 170.018253][ T5890] loop5: detected capacity change from 0 to 512 [ 170.031443][ T5890] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 170.050849][ T5890] EXT4-fs (loop5): 1 truncate cleaned up [ 170.056989][ T5890] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 170.160486][ T14] usb 2-1: 0:2 : does not exist [ 170.192599][ T14] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 170.272278][ T14] usb 2-1: USB disconnect, device number 4 [ 170.447684][ T5179] EXT4-fs (loop5): unmounting filesystem. [ 170.471083][ T5904] fuse: Bad value for 'fd' [ 171.441763][ T5911] loop5: detected capacity change from 0 to 256 [ 172.660567][ T4320] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 172.701563][ T49] Bluetooth: Too big LE L2CAP SDU length: len 44510 > 1280 [ 172.732072][ T5937] jffs2: notice: (5937) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 172.822051][ T5940] fuse: Bad value for 'fd' [ 172.827475][ T5940] process 'syz.3.441' launched './file0' with NULL argv: empty string added [ 172.871923][ T4320] usb 2-1: Using ep0 maxpacket: 16 [ 172.879136][ T4320] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 172.900530][ T4320] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 172.919608][ T4320] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 172.928814][ T4320] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 172.941922][ T4320] usb 2-1: config 0 descriptor?? [ 173.853261][ T26] audit: type=1800 audit(1791496161.874:8): pid=5955 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.446" name="nexus" dev="configfs" ino=40996 res=0 errno=0 [ 173.898635][ T4320] microsoft 0003:045E:07DA.000B: ignoring exceeding usage max [ 173.917283][ T4320] input: HID 045e:07da as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:045E:07DA.000B/input/input16 [ 173.933666][ T4320] microsoft 0003:045E:07DA.000B: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 175.239320][ T5969] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 175.283055][ T5969] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 175.316490][ T130] usb 2-1: USB disconnect, device number 5 [ 175.416521][ T5960] fido_id[5960]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 175.882152][ T130] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 176.072021][ T130] usb 2-1: Using ep0 maxpacket: 16 [ 176.086008][ T130] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 176.233065][ T130] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 176.442045][ T130] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 176.530780][ T130] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 176.583169][ T130] usb 2-1: config 0 descriptor?? [ 176.687514][ T5993] FAULT_INJECTION: forcing a failure. [ 176.687514][ T5993] name fail_futex, interval 1, probability 0, space 0, times 0 [ 176.709051][ T5993] CPU: 1 PID: 5993 Comm: syz.0.455 Not tainted syzkaller #0 [ 176.716410][ T5993] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 176.726661][ T5993] Call Trace: [ 176.730044][ T5993] [ 176.732991][ T5993] dump_stack_lvl+0x188/0x24e [ 176.737706][ T5993] ? release_firmware_map_entry+0x187/0x187 [ 176.743627][ T5993] ? show_regs_print_info+0x12/0x12 [ 176.748864][ T5993] ? load_image+0x410/0x410 [ 176.753393][ T5993] should_fail_ex+0x390/0x4c0 [ 176.758104][ T5993] get_futex_key+0x1b1/0x1000 [ 176.762805][ T5993] ? futex_setup_timer+0xc0/0xc0 [ 176.767768][ T5993] futex_wake+0x123/0x4f0 [ 176.772115][ T5993] ? release_sock+0x2b/0x1b0 [ 176.776734][ T5993] ? futex_wake_mark+0x150/0x150 [ 176.781792][ T5993] ? print_unlock_imbalance_bug+0x160/0x160 [ 176.787727][ T5993] do_futex+0x2e2/0x320 [ 176.791932][ T5993] ? __ia32_sys_get_robust_list+0x100/0x100 [ 176.797935][ T5993] ? inet_shutdown+0x299/0x370 [ 176.802818][ T5993] __se_sys_futex+0x381/0x410 [ 176.807525][ T5993] ? __x64_sys_futex+0xf0/0xf0 [ 176.812305][ T5993] ? inet_shutdown+0x299/0x370 [ 176.817096][ T5993] ? __x64_sys_futex+0x1d/0xf0 [ 176.821927][ T5993] do_syscall_64+0x4c/0xa0 [ 176.826376][ T5993] ? clear_bhb_loop+0x60/0xb0 [ 176.831091][ T5993] ? clear_bhb_loop+0x60/0xb0 [ 176.835805][ T5993] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 176.841776][ T5993] RIP: 0033:0x7f63e019e1d9 [ 176.846220][ T5993] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 176.865858][ T5993] RSP: 002b:00007f63e0feb0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 176.874461][ T5993] RAX: ffffffffffffffda RBX: 00007f63e0425fa8 RCX: 00007f63e019e1d9 [ 176.882499][ T5993] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f63e0425fac [ 176.890501][ T5993] RBP: 00007f63e0425fa0 R08: 00272ca2d71b1d48 R09: 0000000000000000 [ 176.898470][ T5993] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 176.906541][ T5993] R13: 00007f63e0426038 R14: 00007fffa59b43e0 R15: 00007fffa59b44c8 [ 176.914748][ T5993] [ 176.928083][ T26] audit: type=1800 audit(1791496164.924:9): pid=5992 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.456" name="no_out_endpoint" dev="configfs" ino=41042 res=0 errno=0 [ 177.140019][ T130] microsoft 0003:045E:07DA.000C: ignoring exceeding usage max [ 177.501502][ T130] input: HID 045e:07da as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:045E:07DA.000C/input/input17 [ 177.516576][ T6002] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 177.554597][ T6002] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 177.583752][ T130] microsoft 0003:045E:07DA.000C: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 178.045811][ T6013] loop0: detected capacity change from 0 to 8 [ 178.257229][ T6013] SQUASHFS error: lzo decompression failed, data probably corrupt [ 178.265414][ T6013] SQUASHFS error: Failed to read block 0x91: -5 [ 178.271710][ T6013] SQUASHFS error: Unable to read metadata cache entry [8f] [ 178.279223][ T6013] SQUASHFS error: Unable to read inode 0x7 [ 178.570819][ T4318] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 178.616634][ T4433] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 178.839913][ T4318] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 178.862742][ T4318] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 178.879967][ T4318] usb 3-1: New USB device found, idVendor=0b95, idProduct=1790, bcdDevice= 1.00 [ 178.891081][ T4318] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 178.899653][ T6015] netlink: 'syz.5.463': attribute type 3 has an invalid length. [ 178.943873][ T6015] netlink: 11575 bytes leftover after parsing attributes in process `syz.5.463'. [ 180.191323][ T33] usb 2-1: USB disconnect, device number 6 [ 180.370864][ T4318] ax88179_178a 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0001: -32 [ 180.382393][ T4318] ax88179_178a 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0006: -32 [ 180.393281][ T4318] ax88179_178a 3-1:1.0 (unnamed net_device) (uninitialized): invalid MAC address, using random [ 182.511007][ T4318] ax88179_178a 3-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 182.531635][ T4318] ax88179_178a 3-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0002: -71 [ 182.555835][ T4318] ax88179_178a 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0001: -71 [ 182.588806][ T4318] ax88179_178a 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0001: -71 [ 182.610604][ T4318] ax88179_178a 3-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 182.640069][ T4318] ax88179_178a 3-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x001f: -71 [ 182.664813][ T4318] ax88179_178a 3-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0019: -71 [ 182.696667][ T4318] ax88179_178a 3-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x001f: -71 [ 182.720193][ T4318] ax88179_178a 3-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x000d: -71 [ 182.747837][ T4318] ax88179_178a 3-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x000e: -71 [ 182.789542][ T6055] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 182.795891][ T4318] ax88179_178a 3-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x000d: -71 [ 182.859308][ T4318] ax88179_178a 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x000e: -71 [ 182.905617][ T4318] ax88179_178a 3-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x000d: -71 [ 182.937408][ T4318] ax88179_178a 3-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x000e: -71 [ 182.972418][ T4318] ax88179_178a 3-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x000d: -71 [ 182.998096][ T4318] ax88179_178a 3-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x000e: -71 [ 183.019039][ T6046] loop0: detected capacity change from 0 to 512 [ 183.025968][ T4318] ax88179_178a 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 183.122748][ T6046] FAT-fs (loop0): error, fat_free: invalid cluster chain (i_pos 548) [ 183.139930][ T4318] ax88179_178a 3-1:1.0 eth1: register 'ax88179_178a' at usb-dummy_hcd.2-1, ASIX AX88179 USB 3.0 Gigabit Ethernet, c6:5d:d5:e6:79:69 [ 183.175314][ T6046] FAT-fs (loop0): Filesystem has been set read-only [ 183.189967][ T4318] usb 3-1: USB disconnect, device number 7 [ 183.206796][ T4318] ax88179_178a 3-1:1.0 eth1: unregister 'ax88179_178a' usb-dummy_hcd.2-1, ASIX AX88179 USB 3.0 Gigabit Ethernet [ 183.228609][ T6061] loop5: detected capacity change from 0 to 512 [ 183.323737][ T6061] EXT4-fs error (device loop5): ext4_validate_block_bitmap:429: comm syz.5.478: bg 0: block 5: invalid block bitmap [ 183.364240][ T6061] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6180: Corrupt filesystem [ 183.395999][ T6061] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #11: comm syz.5.478: invalid indirect mapped block 3 (level 2) [ 183.449660][ T6061] EXT4-fs (loop5): 1 orphan inode deleted [ 183.466919][ T6061] EXT4-fs (loop5): 1 truncate cleaned up [ 183.476655][ T6061] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 183.546082][ T14] smpboot: CPU 1 is now offline [ 183.647010][ T5179] EXT4-fs (loop5): unmounting filesystem. [ 184.150300][ T6066] x86: Booting SMP configuration: [ 184.176883][ T6066] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 184.212848][ T4318] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 184.328135][ T26] audit: type=1800 audit(1791496172.344:10): pid=6072 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.480" name="protocol" dev="configfs" ino=41119 res=0 errno=0 [ 184.411068][ T6074] loop0: detected capacity change from 0 to 512 [ 184.421946][ T4318] usb 3-1: Using ep0 maxpacket: 16 [ 184.429410][ T4318] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 184.452553][ T6074] EXT4-fs: Ignoring removed oldalloc option [ 184.458999][ T4318] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 184.501998][ T6074] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 184.523669][ T4318] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 184.542451][ T4318] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 184.562674][ T4318] usb 3-1: config 0 descriptor?? [ 186.276215][ T6074] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 186.330329][ T6074] ext4 filesystem being mounted at /98/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 186.356291][ T6083] netlink: 'syz.5.483': attribute type 1 has an invalid length. [ 186.459367][ T6083] bond1: (slave gretap1): making interface the new active one [ 186.495396][ T6083] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 186.516393][ T4318] microsoft 0003:045E:07DA.000D: ignoring exceeding usage max [ 186.548992][ T6085] bond1: (slave vlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 186.586783][ T4318] input: HID 045e:07da as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:045E:07DA.000D/input/input18 [ 186.624539][ T4318] microsoft 0003:045E:07DA.000D: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 186.652518][ T14] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 186.795932][ T6058] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 186.804619][ T6058] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 186.817930][ T4318] usb 3-1: USB disconnect, device number 8 [ 186.847811][ T14] usb 1-1: unable to get BOS descriptor or descriptor too short [ 186.862737][ T14] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 186.923851][ T14] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 186.939026][ T6088] fido_id[6088]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 186.962527][ T14] usb 1-1: config 1 has no interface number 1 [ 186.999193][ T14] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 187.031252][ T14] usb 1-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40 [ 187.071125][ T14] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 187.101429][ T14] usb 1-1: Product: syz [ 187.270889][ T6091] loop5: detected capacity change from 0 to 32768 [ 187.284750][ T14] usb 1-1: Manufacturer: syz [ 187.289409][ T14] usb 1-1: SerialNumber: syz [ 187.303052][ T6091] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop5 scanned by syz.5.485 (6091) [ 187.382103][ T6091] BTRFS info (device loop5): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 187.393701][ T6091] BTRFS info (device loop5): using crc32c (crc32c-intel) checksum algorithm [ 187.403156][ T6091] BTRFS info (device loop5): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 187.413320][ T6091] BTRFS info (device loop5): use zstd compression, level 3 [ 187.420677][ T6091] BTRFS info (device loop5): force clearing of disk cache [ 187.428040][ T6091] BTRFS info (device loop5): enabling disk space caching [ 187.435540][ T6091] BTRFS info (device loop5): disk space caching is enabled [ 187.591435][ T4274] EXT4-fs (loop0): unmounting filesystem. [ 187.657626][ T14] usb 1-1: USB disconnect, device number 6 [ 187.664717][ T6087] loop1: detected capacity change from 0 to 512 [ 187.744446][ T6087] FAT-fs (loop1): Directory bread(block 199916) failed [ 187.778100][ T6087] FAT-fs (loop1): Directory bread(block 199917) failed [ 187.788861][ T6091] BTRFS info (device loop5): enabling ssd optimizations [ 187.809719][ T6091] BTRFS info (device loop5): rebuilding free space tree [ 187.860646][ T6091] BTRFS info (device loop5): disabling free space tree [ 187.867791][ T6091] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 187.878907][ T6091] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 187.921984][ T6087] FAT-fs (loop1): Directory bread(block 199918) failed [ 187.928932][ T6087] FAT-fs (loop1): Directory bread(block 199919) failed [ 187.966601][ T6115] loop0: detected capacity change from 0 to 512 [ 187.977588][ T6091] FAULT_INJECTION: forcing a failure. [ 187.977588][ T6091] name failslab, interval 1, probability 0, space 0, times 0 [ 187.991162][ T6091] CPU: 0 PID: 6091 Comm: syz.5.485 Not tainted syzkaller #0 [ 187.998480][ T6091] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 188.008907][ T6091] Call Trace: [ 188.012247][ T6091] [ 188.015191][ T6091] dump_stack_lvl+0x188/0x24e [ 188.019903][ T6091] ? show_regs_print_info+0x12/0x12 [ 188.025134][ T6091] ? load_image+0x410/0x410 [ 188.029694][ T6091] ? __might_sleep+0xd0/0xd0 [ 188.034309][ T6091] ? __lock_acquire+0x7ea0/0x7ea0 [ 188.039373][ T6091] should_fail_ex+0x390/0x4c0 [ 188.044094][ T6091] should_failslab+0x5/0x20 [ 188.048616][ T6091] slab_pre_alloc_hook+0x59/0x300 [ 188.053675][ T6091] kmem_cache_alloc+0x56/0x2f0 [ 188.058472][ T6091] ? integrity_inode_get+0x111/0x560 [ 188.063818][ T6091] integrity_inode_get+0x111/0x560 [ 188.068974][ T6091] process_measurement+0x3bc/0x1c40 [ 188.074222][ T6091] ? __kmem_cache_free+0xb6/0x200 [ 188.079288][ T6091] ? ima_file_mmap+0x140/0x140 [ 188.084090][ T6091] ? tomoyo_check_open_permission+0x1bf/0x440 [ 188.090189][ T6091] ? tomoyo_check_path_number_acl+0x280/0x280 [ 188.096317][ T6091] ? apparmor_inode_getattr+0x20/0x20 [ 188.101710][ T6091] ? apparmor_current_getsecid_subj+0xb1/0x110 [ 188.107889][ T6091] ima_file_check+0xc8/0x110 [ 188.112601][ T6091] ? ima_bprm_check+0x200/0x200 [ 188.117485][ T6091] path_openat+0x272b/0x2f10 [ 188.122197][ T6091] ? do_filp_open+0x420/0x420 [ 188.126974][ T6091] do_filp_open+0x1ee/0x420 [ 188.131486][ T6091] ? vfs_tmpfile+0x470/0x470 [ 188.136116][ T6091] ? _raw_spin_unlock+0x24/0x40 [ 188.140964][ T6091] ? alloc_fd+0x590/0x640 [ 188.145302][ T6091] do_sys_openat2+0x14b/0x4f0 [ 188.149987][ T6091] ? do_sys_open+0xe0/0xe0 [ 188.154431][ T6091] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 188.160416][ T6091] ? lock_chain_count+0x20/0x20 [ 188.165295][ T6091] __x64_sys_openat+0x135/0x160 [ 188.170152][ T6091] do_syscall_64+0x4c/0xa0 [ 188.174566][ T6091] ? clear_bhb_loop+0x60/0xb0 [ 188.179273][ T6091] ? clear_bhb_loop+0x60/0xb0 [ 188.183951][ T6091] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 188.190130][ T6091] RIP: 0033:0x7f7b80b9e1d9 [ 188.194556][ T6091] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 188.214363][ T6091] RSP: 002b:00007f7b81b24028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 188.223412][ T6091] RAX: ffffffffffffffda RBX: 00007f7b80e25fa0 RCX: 00007f7b80b9e1d9 [ 188.231390][ T6091] RDX: 0000000000143042 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 188.239358][ T6091] RBP: 00007f7b80c35888 R08: 0000000000000000 R09: 0000000000000000 [ 188.247330][ T6091] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 188.255295][ T6091] R13: 00007f7b80e26038 R14: 00007f7b80e25fa0 R15: 00007ffd3a083ad8 [ 188.263279][ T6091] [ 188.302028][ T6087] FAT-fs (loop1): Directory bread(block 199920) failed [ 188.309808][ T6087] FAT-fs (loop1): Directory bread(block 199921) failed [ 188.334549][ T6087] FAT-fs (loop1): Directory bread(block 199922) failed [ 188.383701][ T6087] FAT-fs (loop1): Directory bread(block 199923) failed [ 188.392572][ T6115] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 188.416383][ T6115] ext4 filesystem being mounted at /99/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 188.506406][ T6087] FAT-fs (loop1): FAT read failed (blocknr 128) [ 188.569336][ T5179] BTRFS info (device loop5): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 188.741938][ T127] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 188.942011][ T127] usb 3-1: Using ep0 maxpacket: 16 [ 188.949122][ T127] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 188.981268][ T127] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 189.009407][ T127] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 189.028912][ T127] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 189.060925][ T4274] EXT4-fs (loop0): unmounting filesystem. [ 189.068970][ T127] usb 3-1: config 0 descriptor?? [ 189.506492][ T127] microsoft 0003:045E:07DA.000E: ignoring exceeding usage max [ 189.544163][ T127] input: HID 045e:07da as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:045E:07DA.000E/input/input19 [ 189.601135][ T127] microsoft 0003:045E:07DA.000E: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 189.707523][ T6155] device syzkaller0 entered promiscuous mode [ 189.793126][ T6121] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 189.801672][ T6121] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 189.833653][ T127] usb 3-1: USB disconnect, device number 9 [ 189.883696][ T6156] fido_id[6156]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/3-1/report_descriptor': No such file or directory [ 191.242140][ T4283] Bluetooth: hci0: command 0x0406 tx timeout [ 191.242147][ T4276] Bluetooth: hci2: command 0x0406 tx timeout [ 191.242183][ T4283] Bluetooth: hci4: command 0x0406 tx timeout [ 191.261384][ T49] Bluetooth: hci3: command 0x0406 tx timeout [ 192.994207][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 193.000588][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 193.917051][ T6168] loop5: detected capacity change from 0 to 8 [ 193.948270][ T6168] unable to read xattr id index table [ 194.177494][ T6173] loop5: detected capacity change from 0 to 1024 [ 194.334031][ T6173] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 194.794313][ T6173] ext4 filesystem being mounted at /59/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 194.935525][ T6173] EXT4-fs (loop5): unmounting filesystem. [ 196.861015][ T6195] x86/PAT: syz.2.505:6195 freeing invalid memtype [mem 0xfe004000-0xfe004fff] [ 196.897590][ T6195] x86/PAT: syz.2.505:6195 freeing invalid memtype [mem 0xfe005000-0xfe005fff] [ 197.576013][ T6207] file system registered [ 197.698582][ T5179] ffs_data_put(): freeing [ 197.846697][ T6209] md/raid:md0: not clean -- starting background reconstruction [ 197.899513][ T6209] md/raid:md0: invalid chunk size 0 [ 197.933348][ T6209] md: pers->run() failed ... [ 198.138375][ T6216] md/raid:md0: not clean -- starting background reconstruction [ 198.162015][ T6216] md/raid:md0: invalid chunk size 0 [ 198.179016][ T6216] md: pers->run() failed ... [ 198.413120][ T6225] netlink: 12 bytes leftover after parsing attributes in process `syz.5.515'. [ 201.002528][ T6225] netlink: 8 bytes leftover after parsing attributes in process `syz.5.515'. [ 201.036086][ T6225] netlink: 24 bytes leftover after parsing attributes in process `syz.5.515'. [ 202.442564][ T6225] bond2: (slave veth3): Enslaving as an active interface with an up link [ 202.477811][ T6238] ip_tables: iptables: counters copy to user failed while replacing table [ 202.543862][ T5226] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.730414][ T5226] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.903669][ T4497] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 203.148512][ T6249] Option 'äÇ©?oÈ냟W½ÎƒÞ(ödîðÌ›ÔÏpø^ï8Æ ÝõXKÒtÔ..+jXpsízÑÔû¸ÔÿgˆH{“é&·}–(Ú)“eÒÓH/ Ïk;REÁŠ¨ãÂÉ<' to dns_resolver key: bad/missing value [ 203.529327][ T5226] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 203.671025][ T5226] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.521904][ T6133] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 206.731911][ T6133] usb 2-1: Using ep0 maxpacket: 8 [ 206.738812][ T6133] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 206.783515][ T6133] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 206.816859][ T6133] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 208.659983][ T6133] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12592, setting to 1024 [ 208.709078][ T6133] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 208.763239][ T6133] usb 2-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 208.802888][ T6133] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 208.813313][ T6332] capability: warning: `syz.1.535' uses deprecated v2 capabilities in a way that may be insecure [ 208.891067][ T6133] usb 2-1: config 0 descriptor?? [ 208.930558][ T6133] usb 2-1: can't set config #0, error -71 [ 208.960275][ T6133] usb 2-1: USB disconnect, device number 7 [ 209.361996][ T6133] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 209.370164][ T5226] IPVS: stopping master sync thread 4453 ... [ 209.436187][ T6350] loop5: detected capacity change from 0 to 736 [ 209.563616][ T6133] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 209.615499][ T6133] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 209.677163][ T6133] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 209.752980][ T6133] usb 2-1: config 0 descriptor?? [ 209.853262][ T6358] netlink: 52 bytes leftover after parsing attributes in process `syz.0.539'. [ 209.934016][ T6358] netlink: 76 bytes leftover after parsing attributes in process `syz.0.539'. [ 210.013377][ T6358] netlink: 52 bytes leftover after parsing attributes in process `syz.0.539'. [ 210.168754][ T6133] keytouch 0003:0926:3333.000F: fixing up Keytouch IEC report descriptor [ 210.192838][ T6133] input: HID 0926:3333 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0926:3333.000F/input/input20 [ 210.382099][ T5226] device hsr_slave_0 left promiscuous mode [ 210.408292][ T6364] loop0: detected capacity change from 0 to 512 [ 210.439513][ T6364] EXT4-fs: inline encryption not supported [ 210.451180][ T5226] device hsr_slave_1 left promiscuous mode [ 210.472646][ T6133] keytouch 0003:0926:3333.000F: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.1-1/input0 [ 210.506059][ T5226] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 210.524198][ T6364] EXT4-fs (loop0): Test dummy encryption mode enabled [ 210.542158][ T5226] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 210.551959][ T6364] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 210.755642][ T6133] usb 2-1: USB disconnect, device number 8 [ 210.819193][ T5226] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 210.831066][ T5226] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 210.831792][ T6364] EXT4-fs error (device loop0): ext4_orphan_get:1435: comm syz.0.540: bad orphan inode 131083 [ 211.732558][ T5226] device bridge_slave_1 left promiscuous mode [ 211.754514][ T5226] bridge0: port 2(bridge_slave_1) entered disabled state [ 211.811004][ T6364] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 211.988466][ T5226] device bridge_slave_0 left promiscuous mode [ 212.007359][ T5226] bridge0: port 1(bridge_slave_0) entered disabled state [ 212.169497][ T5226] device veth1_macvtap left promiscuous mode [ 212.194267][ T5226] device veth0_macvtap left promiscuous mode [ 212.200455][ T5226] device veth1_vlan left promiscuous mode [ 212.228482][ T5226] device veth0_vlan left promiscuous mode [ 212.255234][ T49] Bluetooth: hci4: unexpected subevent 0x01 length: 19 > 18 [ 212.262933][ T49] Bluetooth: hci4: Ignoring HCI_Connection_Complete for existing connection [ 212.319606][ T4283] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 212.332859][ T4283] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 212.343462][ T4283] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 212.351559][ T4283] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 212.359631][ T4283] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 212.367122][ T4283] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 213.132125][ T6390] loop5: detected capacity change from 0 to 256 [ 213.204835][ T6390] exFAT-fs (loop5): failed to load upcase table (idx : 0x000106cd, chksum : 0x3aeaf2c0, utbl_chksum : 0xe619d30d) [ 213.232749][ T6390] exFAT-fs (loop5): failed to load alloc-bitmap [ 213.241406][ T6390] exFAT-fs (loop5): failed to recognize exfat type [ 213.346996][ T5226] team0 (unregistering): Port device team_slave_1 removed [ 213.394618][ T5226] team0 (unregistering): Port device team_slave_0 removed [ 213.444640][ T5226] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 213.499403][ T5226] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 213.877156][ T5226] bond0 (unregistering): Released all slaves [ 214.161622][ T6134] ------------[ cut here ]------------ [ 214.169269][ T6134] sysfs group 'power' not found for kobject 'bt0' [ 214.214324][ T6397] ip_tables: iptables: counters copy to user failed while replacing table [ 214.223366][ T6134] WARNING: CPU: 0 PID: 6134 at fs/sysfs/group.c:280 sysfs_remove_group+0x177/0x290 [ 214.233204][ T6134] Modules linked in: [ 214.237240][ T6134] CPU: 0 PID: 6134 Comm: kworker/0:18 Not tainted syzkaller #0 [ 214.244839][ T6134] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 214.255271][ T6134] Workqueue: events delete_netdev [ 214.260336][ T6134] RIP: 0010:sysfs_remove_group+0x177/0x290 [ 214.266261][ T6134] Code: 8b 1b 4c 89 f8 48 c1 e8 03 42 80 3c 28 00 74 08 4c 89 ff e8 9b 27 cb ff 49 8b 17 48 c7 c7 60 76 9c 8a 48 89 de e8 d9 3e 45 ff <0f> 0b 48 83 c4 08 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 83 cb 79 ff [ 214.285966][ T6134] RSP: 0018:ffffc90005f47880 EFLAGS: 00010246 [ 214.292119][ T6134] RAX: 622831b5defd0a00 RBX: ffffffff8b03cca0 RCX: ffff888025b65a00 [ 214.300300][ T6134] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000002 [ 214.308444][ T6134] RBP: ffffc90005f479b0 R08: ffffc90005f47507 R09: 1ffff92000be8ea0 [ 214.319905][ T6134] R10: dffffc0000000000 R11: fffff52000be8ea1 R12: 1ffffffff1607998 [ 214.328317][ T6134] R13: dffffc0000000000 R14: ffff8880735f8828 R15: ffff88802b930688 [ 214.336349][ T6134] FS: 0000000000000000(0000) GS:ffff8880b8c00000(0000) knlGS:0000000000000000 [ 214.345467][ T6134] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 214.352153][ T6134] CR2: 0000000000000000 CR3: 000000005ad13000 CR4: 00000000003506f0 [ 214.360692][ T6134] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 214.368955][ T6134] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 214.377134][ T6134] Call Trace: [ 214.380413][ T6134] [ 214.383670][ T6134] ? sysfs_unmerge_group+0x109/0x130 [ 214.389075][ T6134] device_del+0x2ab/0xa80 [ 214.393563][ T6134] ? kill_device+0x160/0x160 [ 214.398187][ T6134] ? pm_runtime_set_memalloc_noio+0x1e3/0x250 [ 214.404613][ T6134] ? netdev_unregister_kobject+0x164/0x250 [ 214.410663][ T6134] unregister_netdevice_many_notify+0x14b6/0x1990 [ 214.417634][ T6134] ? unregister_netdevice_many+0x20/0x20 [ 214.423789][ T6134] ? __mutex_lock+0x7f6/0xae0 [ 214.428516][ T6134] unregister_netdevice_queue+0x2e5/0x330 [ 214.434434][ T6134] ? list_netdevice+0x640/0x640 [ 214.439667][ T6134] ? read_lock_is_recursive+0x10/0x10 [ 214.441931][ T4283] Bluetooth: hci1: command 0x0409 tx timeout [ 214.445105][ T6134] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 214.457631][ T6134] ? _raw_spin_unlock+0x40/0x40 [ 214.462546][ T6134] ? process_one_work+0x7b4/0x1160 [ 214.467714][ T6134] ? process_one_work+0x7b4/0x1160 [ 214.472900][ T6134] lowpan_unregister_netdev+0x18/0x20 [ 214.478546][ T6134] unregister_dev+0x70/0x1a0 [ 214.483265][ T6134] ? process_one_work+0x7b4/0x1160 [ 214.488417][ T6134] process_one_work+0x8ab/0x1160 [ 214.494253][ T6134] ? worker_detach_from_pool+0x240/0x240 [ 214.499916][ T6134] ? _raw_spin_lock_irq+0xb7/0xf0 [ 214.505558][ T6134] ? _raw_spin_lock_irqsave+0x100/0x100 [ 214.511141][ T6134] ? wq_worker_running+0x97/0x190 [ 214.516346][ T6134] worker_thread+0xaf5/0x12a0 [ 214.521185][ T6134] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 214.527159][ T6134] kthread+0x29d/0x330 [ 214.531240][ T6134] ? worker_clr_flags+0x1a0/0x1a0 [ 214.536358][ T6134] ? kthread_blkcg+0xd0/0xd0 [ 214.541065][ T6134] ret_from_fork+0x1f/0x30 [ 214.545572][ T6134] [ 214.548961][ T6134] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 214.556238][ T6134] CPU: 0 PID: 6134 Comm: kworker/0:18 Not tainted syzkaller #0 [ 214.563796][ T6134] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 214.573864][ T6134] Workqueue: events delete_netdev [ 214.578894][ T6134] Call Trace: [ 214.582206][ T6134] [ 214.585135][ T6134] dump_stack_lvl+0x188/0x24e [ 214.589811][ T6134] ? memcpy+0x3c/0x60 [ 214.593789][ T6134] ? show_regs_print_info+0x12/0x12 [ 214.599026][ T6134] ? load_image+0x410/0x410 [ 214.603577][ T6134] panic+0x2d3/0x710 [ 214.607485][ T6134] ? bpf_jit_dump+0xd0/0xd0 [ 214.612080][ T6134] ? ret_from_fork+0x1f/0x30 [ 214.616670][ T6134] __warn+0x2f8/0x4f0 [ 214.620820][ T6134] ? sysfs_remove_group+0x177/0x290 [ 214.626022][ T6134] ? sysfs_remove_group+0x177/0x290 [ 214.631219][ T6134] report_bug+0x2ba/0x4f0 [ 214.635635][ T6134] ? sysfs_remove_group+0x177/0x290 [ 214.640838][ T6134] handle_bug+0x3a/0x70 [ 214.644988][ T6134] exc_invalid_op+0x16/0x40 [ 214.649485][ T6134] asm_exc_invalid_op+0x16/0x20 [ 214.654329][ T6134] RIP: 0010:sysfs_remove_group+0x177/0x290 [ 214.660309][ T6134] Code: 8b 1b 4c 89 f8 48 c1 e8 03 42 80 3c 28 00 74 08 4c 89 ff e8 9b 27 cb ff 49 8b 17 48 c7 c7 60 76 9c 8a 48 89 de e8 d9 3e 45 ff <0f> 0b 48 83 c4 08 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 83 cb 79 ff [ 214.679917][ T6134] RSP: 0018:ffffc90005f47880 EFLAGS: 00010246 [ 214.685983][ T6134] RAX: 622831b5defd0a00 RBX: ffffffff8b03cca0 RCX: ffff888025b65a00 [ 214.694035][ T6134] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000002 [ 214.702200][ T6134] RBP: ffffc90005f479b0 R08: ffffc90005f47507 R09: 1ffff92000be8ea0 [ 214.710339][ T6134] R10: dffffc0000000000 R11: fffff52000be8ea1 R12: 1ffffffff1607998 [ 214.718331][ T6134] R13: dffffc0000000000 R14: ffff8880735f8828 R15: ffff88802b930688 [ 214.726326][ T6134] ? sysfs_unmerge_group+0x109/0x130 [ 214.731620][ T6134] device_del+0x2ab/0xa80 [ 214.735963][ T6134] ? kill_device+0x160/0x160 [ 214.740637][ T6134] ? pm_runtime_set_memalloc_noio+0x1e3/0x250 [ 214.746893][ T6134] ? netdev_unregister_kobject+0x164/0x250 [ 214.752701][ T6134] unregister_netdevice_many_notify+0x14b6/0x1990 [ 214.759125][ T6134] ? unregister_netdevice_many+0x20/0x20 [ 214.764780][ T6134] ? __mutex_lock+0x7f6/0xae0 [ 214.769465][ T6134] unregister_netdevice_queue+0x2e5/0x330 [ 214.775186][ T6134] ? list_netdevice+0x640/0x640 [ 214.780115][ T6134] ? read_lock_is_recursive+0x10/0x10 [ 214.785569][ T6134] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 214.791482][ T6134] ? _raw_spin_unlock+0x40/0x40 [ 214.796446][ T6134] ? process_one_work+0x7b4/0x1160 [ 214.801802][ T6134] ? process_one_work+0x7b4/0x1160 [ 214.807175][ T6134] lowpan_unregister_netdev+0x18/0x20 [ 214.812554][ T6134] unregister_dev+0x70/0x1a0 [ 214.817139][ T6134] ? process_one_work+0x7b4/0x1160 [ 214.822249][ T6134] process_one_work+0x8ab/0x1160 [ 214.827284][ T6134] ? worker_detach_from_pool+0x240/0x240 [ 214.832924][ T6134] ? _raw_spin_lock_irq+0xb7/0xf0 [ 214.838057][ T6134] ? _raw_spin_lock_irqsave+0x100/0x100 [ 214.843637][ T6134] ? wq_worker_running+0x97/0x190 [ 214.848676][ T6134] worker_thread+0xaf5/0x12a0 [ 214.853381][ T6134] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 214.859607][ T6134] kthread+0x29d/0x330 [ 214.863683][ T6134] ? worker_clr_flags+0x1a0/0x1a0 [ 214.868705][ T6134] ? kthread_blkcg+0xd0/0xd0 [ 214.873286][ T6134] ret_from_fork+0x1f/0x30 [ 214.877709][ T6134] [ 214.880842][ T6134] Kernel Offset: disabled [ 214.885434][ T6134] Rebooting in 86400 seconds..